nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2026-01-06 11:43:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Security improvement dial_string.lua

Browse Source
This commit is contained in:
Mark Crane
2013-04-18 07:30:55 +00:00
parent 61206a4383
commit 4ddf62d0c8
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
includes/install/scripts/dial_string.lua
View File

@@ -41,6 +41,7 @@
if ( session:ready() ) then if ( session:ready() ) then
session:answer(); session:answer();
domain_uuid = session:getVariable("domain_uuid");
pin_number = session:getVariable("pin_number"); pin_number = session:getVariable("pin_number");
sounds_dir = session:getVariable("sounds_dir"); sounds_dir = session:getVariable("sounds_dir");
sip_from_user = session:getVariable("sip_from_user"); sip_from_user = session:getVariable("sip_from_user");
@@ -89,6 +90,7 @@ if ( session:ready() ) then
sql = sql .. "WHERE e.domain_uuid = d.domain_uuid "; sql = sql .. "WHERE e.domain_uuid = d.domain_uuid ";
if (extension == "true") then if (extension == "true") then
sql = sql .. "AND e.extension = '" .. unique_id .."' "; sql = sql .. "AND e.extension = '" .. unique_id .."' ";
sql = sql .. "AND e.domain_uuid = '" .. domain_uuid .."' ";
else else
sql = sql .. "AND e.unique_id = '" .. unique_id .."' "; sql = sql .. "AND e.unique_id = '" .. unique_id .."' ";
end end