nsinnovations/fusionpbx
2
0
Fork 0
mirror of https://github.com/fusionpbx/fusionpbx.git synced 2026-01-06 11:43:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update conference_control_details.php (#4246)

Browse Source
This commit is contained in:
AlexanderDCrane
2019-06-03 10:55:01 -06:00
committed by FusionPBX
parent 1a257f1e1a
commit 5ad0cbec3a
1 changed files with 34 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files

58
app/conference_controls/conference_control_details.php
View File

@@ -22,14 +22,29 @@
$order_by = check_str($_GET["order_by"]); $order_by = check_str($_GET["order_by"]);
$order = check_str($_GET["order"]); $order = check_str($_GET["order"]);
//validate order by
if (strlen($order_by) > 0) {
$order_by = preg_replace('#[^a-zA-Z0-9_\-]#', '', $order_by);
}
//validate the order
switch ($order) {
case 'asc':
break;
case 'desc':
break;
default:
$order = '';
}
//add the search term //add the search term
$search = check_str($_GET["search"]); $search = check_str($_GET["search"]);
if (strlen($search) > 0) { if (strlen($search) > 0) {
$sql_search = "and ("; $sql_search = "and (";
$sql_search .= "control_digits like '%".$search."%'"; $sql_search .= "control_digits like :search";
$sql_search .= "or control_action like '%".$search."%'"; $sql_search .= "or control_action like :search";
$sql_search .= "or control_data like '%".$search."%'"; $sql_search .= "or control_data like :search";
$sql_search .= "or control_enabled like '%".$search."%'"; $sql_search .= "or control_enabled like :search";
$sql_search .= ")"; $sql_search .= ")";
} }
//additional includes //additional includes
@@ -39,21 +54,16 @@
//prepare to page the results //prepare to page the results
$sql = "select count(*) as num_rows "; $sql = "select count(*) as num_rows ";
$sql .= "from v_conference_control_details "; $sql .= "from v_conference_control_details ";
$sql .= "where conference_control_uuid = '$conference_control_uuid' "; $sql .= "where conference_control_uuid = :conference_control_uuid ";
//$sql .= "and domain_uuid = '$domain_uuid' "; //$sql .= "and domain_uuid = :domain_uuid ";
$sql .= $sql_search; $sql .= $sql_search;
if (strlen($order_by) > 0) { $sql .= "order by $order_by $order "; } $parameters['conference_control_uuid'] = $conference_control_uuid;
$prep_statement = $db->prepare($sql); //$parameters['domain_uuid'] = $domain_uuid;
if ($prep_statement) { if (strlen($search) > 0) {
$prep_statement->execute(); $parameters['search'] = '%'.$search.'%';
$row = $prep_statement->fetch(PDO::FETCH_ASSOC);
if ($row['num_rows'] > 0) {
$num_rows = $row['num_rows'];
}
else {
$num_rows = '0';
}
} }
$database = new database;
$row = $database->select($sql, $parameters, 'all');
//prepare to page the results //prepare to page the results
$rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50; $rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50;
@@ -65,15 +75,15 @@
//get the list //get the list
$sql = "select * from v_conference_control_details "; $sql = "select * from v_conference_control_details ";
$sql .= "where conference_control_uuid = '$conference_control_uuid' "; $sql .= "where conference_control_uuid = :conference_control_uuid ";
//$sql .= "and domain_uuid = '$domain_uuid' "; //$sql .= "and domain_uuid = :domain_uuid ";
$sql .= $sql_search; $sql .= $sql_search;
if (strlen($order_by) > 0) { $sql .= "order by $order_by $order "; } if (strlen($order_by) > 0) { $sql .= "order by $order_by $order "; }
$sql .= "limit $rows_per_page offset $offset "; $sql .= "limit :rows_per_page offset :offset ";
$prep_statement = $db->prepare(check_sql($sql)); $database = new database;
$prep_statement->execute(); $parameters['rows_per_page'] = $rows_per_page;
$result = $prep_statement->fetchAll(PDO::FETCH_NAMED); $parameters['offset'] = $offset;
unset ($prep_statement, $sql); $result = $database->select($sql, $parameters, 'all');
//alternate the row style //alternate the row style
$c = 0; $c = 0;