\n";
echo " | \n";
- if (strlen($ivr_menu_uuid) > 0) {
+ if (is_uuid($ivr_menu_uuid)) {
echo " \n";
echo " \n";
}
diff --git a/app/ivr_menus/ivr_menu_option_delete.php b/app/ivr_menus/ivr_menu_option_delete.php
index 78166b195c..f29646c289 100644
--- a/app/ivr_menus/ivr_menu_option_delete.php
+++ b/app/ivr_menus/ivr_menu_option_delete.php
@@ -43,13 +43,11 @@
$text = $language->get();
//set the http values as variables
- if (count($_GET) > 0) {
- $id = check_str($_GET["id"]);
- $ivr_menu_uuid = check_str($_GET["ivr_menu_uuid"]);
- }
+ $ivr_menu_option_uuid = $_GET["id"];
+ $ivr_menu_uuid = $_GET["ivr_menu_uuid"];
//delete the ivr menu option
- if (is_uuid($id)) {
+ if (is_uuid($ivr_menu_option_uuid) && is_uuid($ivr_menu_uuid)) {
//get the dialplan_uuid
$sql = "select * from v_ivr_menus ";
$sql .= "where domain_uuid = :domain_uuid ";
@@ -64,25 +62,30 @@
$ivr_menu_context = $row["ivr_menu_context"];
}
}
- unset($sql, $parameters);
+ unset($sql, $parameters, $result, $row);
//delete the data
- $array['ivr_menu_options'][]['ivr_menu_option_uuid'] = $id;
+ $array['ivr_menu_options'][]['ivr_menu_option_uuid'] = $ivr_menu_option_uuid;
$database = new database;
$database->app_name = 'ivr_menus';
$database->app_uuid = 'a5788e9b-58bc-bd1b-df59-fff5d51253ab';
$database->delete($array);
//$message = $database->message;
+
+ //clear the cache
+ $cache = new cache;
+ $cache->delete("dialplan:".$ivr_menu_context);
+
+ //set message
+ message::add($text['message-delete']);
+
+ //redirect the user
+ header('Location: ivr_menu_edit.php?id='.$ivr_menu_uuid);
+ exit;
}
-//clear the cache
- $cache = new cache;
- $cache->delete("dialplan:".$ivr_menu_context);
-
-//redirect the user
- message::add($text['message-delete']);
- if (is_uuid($ivr_menu_uuid)) {
- header('Location: ivr_menu_edit.php?id='.$ivr_menu_uuid);
- }
+//default redirect
+ header('Location: ivr_menus.php');
+ exit;
?>
diff --git a/app/ivr_menus/ivr_menus.php b/app/ivr_menus/ivr_menus.php
index 07fce669b3..55239a0af4 100644
--- a/app/ivr_menus/ivr_menus.php
+++ b/app/ivr_menus/ivr_menus.php
@@ -43,37 +43,38 @@
$text = $language->get();
//get variables used to control the order
- $order_by = check_str($_GET["order_by"]);
- $order = check_str($_GET["order"]);
+ $order_by = $_GET["order_by"];
+ $order = $_GET["order"];
//add the search term
- $search = strtolower(check_str($_GET["search"]));
+ $search = strtolower($_GET["search"]);
if (strlen($search) > 0) {
$sql_search = "and (";
- $sql_search .= "lower(ivr_menu_name) like '%".$search."%' ";
- $sql_search .= "or lower(ivr_menu_extension) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_greet_long) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_greet_short) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_invalid_sound) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_exit_sound) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_confirm_macro) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_confirm_key) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_tts_engine) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_tts_voice) like '%".$search."%' ";
+ $sql_search .= "lower(ivr_menu_name) like :search ";
+ $sql_search .= "or lower(ivr_menu_extension) like :search ";
+ //$sql_search .= "or lower(ivr_menu_greet_long) like :search ";
+ //$sql_search .= "or lower(ivr_menu_greet_short) like :search ";
+ //$sql_search .= "or lower(ivr_menu_invalid_sound) like :search ";
+ //$sql_search .= "or lower(ivr_menu_exit_sound) like :search ";
+ //$sql_search .= "or lower(ivr_menu_confirm_macro) like :search ";
+ //$sql_search .= "or lower(ivr_menu_confirm_key) like :search ";
+ //$sql_search .= "or lower(ivr_menu_tts_engine) like :search ";
+ //$sql_search .= "or lower(ivr_menu_tts_voice) like :search ";
//$sql_search .= "or lower(ivr_menu_confirm_attempts) like '%".$search."%'" ;
- //$sql_search .= "or lower(ivr_menu_timeout) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_exit_app) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_exit_data) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_inter_digit_timeout) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_max_failures) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_max_timeouts) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_digit_len) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_direct_dial) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_ringback) like '%".$search."%' ";
- //$sql_search .= "or lower(ivr_menu_cid_prefix) like '%".$search."%' ";
- $sql_search .= "or lower(ivr_menu_enabled) like '%".$search."%' ";
- $sql_search .= "or lower(ivr_menu_description) like '%".$search."%' ";
+ //$sql_search .= "or lower(ivr_menu_timeout) like :search ";
+ //$sql_search .= "or lower(ivr_menu_exit_app) like :search ";
+ //$sql_search .= "or lower(ivr_menu_exit_data) like :search ";
+ //$sql_search .= "or lower(ivr_menu_inter_digit_timeout) like :search ";
+ //$sql_search .= "or lower(ivr_menu_max_failures) like :search ";
+ //$sql_search .= "or lower(ivr_menu_max_timeouts) like :search ";
+ //$sql_search .= "or lower(ivr_menu_digit_len) like :search ";
+ //$sql_search .= "or lower(ivr_menu_direct_dial) like :search ";
+ //$sql_search .= "or lower(ivr_menu_ringback) like :search ";
+ //$sql_search .= "or lower(ivr_menu_cid_prefix) like :search ";
+ $sql_search .= "or lower(ivr_menu_enabled) like :search ";
+ $sql_search .= "or lower(ivr_menu_description) like :search ";
$sql_search .= ")";
+ $parameters['search'] = '%'.$search.'%';
}
//additional includes
@@ -81,21 +82,12 @@
require_once "resources/paging.php";
//prepare to page the results
- $sql = "select count(ivr_menu_uuid) as num_rows from v_ivr_menus ";
- $sql .= "where domain_uuid = '".$_SESSION["domain_uuid"]."' ";
+ $sql = "select count(*) from v_ivr_menus ";
+ $sql .= "where domain_uuid = :domain_uuid ";
$sql .= $sql_search;
- if (strlen($order_by)> 0) { $sql .= "order by $order_by $order "; }
- $prep_statement = $db->prepare($sql);
- if ($prep_statement) {
- $prep_statement->execute();
- $row = $prep_statement->fetch(PDO::FETCH_ASSOC);
- if ($row['num_rows'] > 0) {
- $num_rows = $row['num_rows'];
- }
- else {
- $num_rows = '0';
- }
- }
+ $parameters['domain_uuid'] = $_SESSION["domain_uuid"];
+ $database = new database;
+ $num_rows = $database->select($sql, $parameters, 'column');
//prepare to page the results
$rows_per_page = ($_SESSION['domain']['paging']['numeric'] != '') ? $_SESSION['domain']['paging']['numeric'] : 50;
@@ -106,15 +98,12 @@
$offset = $rows_per_page * $page;
//get the list
- $sql = "select * from v_ivr_menus ";
- $sql .= "where domain_uuid = '".$_SESSION["domain_uuid"]."' ";
- $sql .= $sql_search;
- if (strlen($order_by)> 0) { $sql .= "order by $order_by $order "; }
- $sql .= "limit $rows_per_page offset $offset ";
- $prep_statement = $db->prepare(check_sql($sql));
- $prep_statement->execute();
- $result = $prep_statement->fetchAll(PDO::FETCH_NAMED);
- unset ($prep_statement, $sql);
+ $sql = str_replace('count(*)', '*', $sql);
+ $sql .= order_by($order_by, $order);
+ $sql .= limit_offset($rows_per_page, $offset);
+ $database = new database;
+ $result = $database->select($sql, $parameters, 'all');
+ unset($sql, $parameters);
//alternate the row style
$c = 0;
@@ -219,9 +208,9 @@
echo " | \n";
echo "
\n";
if ($c==0) { $c=1; } else { $c=0; }
- } //end foreach
- unset($sql, $result, $row_count);
- } //end if results
+ }
+ }
+ unset($result, $row);
echo "