nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2026-01-06 11:43:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Escape user data on recording_edit.php (#3104)

Browse Source
This commit is contained in:
AlexanderDCrane
2018-06-09 11:40:24 -06:00
committed by FusionPBX
parent d04057ea0c
commit 56ded99189
1 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
app/recordings/recording_edit.php
View File

@@ -17,7 +17,7 @@
The Initial Developer of the Original Code is The Initial Developer of the Original Code is
Mark J Crane <markjcrane@fusionpbx.com> Mark J Crane <markjcrane@fusionpbx.com>
Portions created by the Initial Developer are Copyright (C) 2008-2012 Portions created by the Initial Developer are Copyright (C) 2008-2018
the Initial Developer. All Rights Reserved. the Initial Developer. All Rights Reserved.
Contributor(s): Contributor(s):
@@ -148,7 +148,7 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
echo " ".$text['label-recording_name']."\n"; echo " ".$text['label-recording_name']."\n";
echo "</td>\n"; echo "</td>\n";
echo "<td width='70%' class='vtable' align='left'>\n"; echo "<td width='70%' class='vtable' align='left'>\n";
echo " <input class='formfld' type='text' name='recording_name' maxlength='255' value=\"$recording_name\">\n"; echo " <input class='formfld' type='text' name='recording_name' maxlength='255' value=\"".escape($recording_name)."\">\n";
echo "<br />\n"; echo "<br />\n";
echo $text['description-recording']."\n"; echo $text['description-recording']."\n";
echo "</td>\n"; echo "</td>\n";
@@ -159,8 +159,8 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
echo " ".$text['label-file_name']."\n"; echo " ".$text['label-file_name']."\n";
echo "</td>\n"; echo "</td>\n";
echo "<td class='vtable' align='left'>\n"; echo "<td class='vtable' align='left'>\n";
echo " <input class='formfld' type='text' name='recording_filename' maxlength='255' value=\"$recording_filename\">\n"; echo " <input class='formfld' type='text' name='recording_filename' maxlength='255' value=\"".escape($recording_filename)."\">\n";
echo " <input type='hidden' name='recording_filename_original' value=\"$recording_filename\">\n"; echo " <input type='hidden' name='recording_filename_original' value=\"".escape($recording_filename)."\">\n";
echo "<br />\n"; echo "<br />\n";
echo $text['message-file']."\n"; echo $text['message-file']."\n";
echo "</td>\n"; echo "</td>\n";
@@ -171,14 +171,14 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
echo " Description\n"; echo " Description\n";
echo "</td>\n"; echo "</td>\n";
echo "<td class='vtable' align='left'>\n"; echo "<td class='vtable' align='left'>\n";
echo " <input class='formfld' type='text' name='recording_description' maxlength='255' value=\"$recording_description\">\n"; echo " <input class='formfld' type='text' name='recording_description' maxlength='255' value=\"".escape($recording_description)."\">\n";
echo "<br />\n"; echo "<br />\n";
echo $text['description-description']."\n"; echo $text['description-description']."\n";
echo "</td>\n"; echo "</td>\n";
echo "</tr>\n"; echo "</tr>\n";
echo " <tr>\n"; echo " <tr>\n";
echo " <td colspan='2' align='right'>\n"; echo " <td colspan='2' align='right'>\n";
echo " <input type='hidden' name='recording_uuid' value='".$recording_uuid."'>\n"; echo " <input type='hidden' name='recording_uuid' value='".escape($recording_uuid)."'>\n";
echo " <br>"; echo " <br>";
echo " <input type='submit' name='submit' class='btn' value='".$text['button-save']."'>\n"; echo " <input type='submit' name='submit' class='btn' value='".$text['button-save']."'>\n";
echo " </td>\n"; echo " </td>\n";
@@ -189,4 +189,4 @@ if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
//include the footer //include the footer
require_once "resources/footer.php"; require_once "resources/footer.php";
?> ?>