Update cmd.php

app/call_centers/cmd.php

@@ -17,15 +17,19 @@
 
 	The Initial Developer of the Original Code is
 	Mark J Crane <markjcrane@fusionpbx.com>
-	Portions created by the Initial Developer are Copyright (C) 2008-2012
+	Portions created by the Initial Developer are Copyright (C) 2008-2019
 	the Initial Developer. All Rights Reserved.
 
 	Contributor(s):
 	Mark J Crane <markjcrane@fusionpbx.com>
 */
+
+//includes
 	include "root.php";
 	require_once "resources/require.php";
 	require_once "resources/check_auth.php";
+
+//check permissions
 	if (permission_exists('call_center_queue_add') || permission_exists('call_center_queue_edit')) {
 		//access granted
 	}
@@ -34,25 +38,45 @@ else {
 		exit;
 	}
 
+//get the variables
 	$cmd = $_GET['cmd'];
-$rdr = $_GET['rdr'];
+	$queue = $_GET['queue'];
+
+//validate the variables
+	switch ($cmd) {
+		case "load":
+			//allow the command
+			break;
+		case "unload":
+			//allow the command
+			break;
+		case "reload":
+			//allow the command
+			break;
+		default:
+			unset($cmd);
+	}
+
+//only allow a uuid for the queue name
+	if (!is_uuid($queue)) {
+		unset($queue);
+	}
 
 //connect to event socket
 	$fp = event_socket_create($_SESSION['event_socket_ip_address'], $_SESSION['event_socket_port'], $_SESSION['event_socket_password']);
 	if ($fp) {
 		$response = event_socket_request($fp, 'api reloadxml');
-	$response = event_socket_request($fp, $cmd);
+		if (isset($cmd) && isset($queue)) {
+			$response = event_socket_request($fp, 'api callcenter_config queue '.$cmd. ' '.$queue);
+		}
 		fclose($fp);
 	}
 	else {
 		$response = '';
 	}
-if ($rdr == "false") {
+
-	//redirect false
+//send the redirect
-	echo $response;
-}
-else {
 	$_SESSION["message"] = $response;
 	header("Location: call_center_queues.php?savemsg=".urlencode($response));
-}
+
 ?>