Changeset 6281

Show
Ignore:
Timestamp:
08/04/08 15:03:44 (4 weeks ago)
Author:
p_lindheimer
Message:

re #2988 Merged revisions 6280 via svnmerge from
http://svn.freepbx.org/modules/branches/2.4

........

r6280 | p_lindheimer | 2008-08-04 15:00:16 -0700 (Mon, 04 Aug 2008) | 1 line


fixes #2988 fix potential SQL injection please test

........

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved
  • modules/branches/2.3

    • Property svnmerge-integrated changed from /modules/branches/2.2:1-3588,3615-3635,3637-3638,3640,3674,3680,3686,3692,3702,3706,3710,3716,3758,3760,3762-3765,3767-3785,3787-3789,3801,3810,3828,3831,3839,3860,3866,3875,3877,3887,3899,3911,3913,3943,3982-3983,3990,3998,4007,4022-4023,4089,4092,4098,4265,4285 /modules/branches/2.4:1-5079,5090,5093,5097-5118,5120-5170,5172,5174,5176-5182,5184-5199,5202-5203,5205-5211,5239,5271-5272,5312,5383,5516,5544-5545,5548-5549,5555,5564,5570,5572-5574,5576-5578,5596,5606-5610,5612,5615-5618,5623-5624,5628,5630-5642,5644-5646,5648-5651,5653-5654,5656-5657,5660,5687-5699,5701-5702,5704-5715,5723-5727,5729-5730,5733-5741,5752-5753,5756,5830-5831,5842-5843,5881,5996,6019-6020,6032-6033 to /modules/branches/2.2:1-3588,3615-3635,3637-3638,3640,3674,3680,3686,3692,3702,3706,3710,3716,3758,3760,3762-3765,3767-3785,3787-3789,3801,3810,3828,3831,3839,3860,3866,3875,3877,3887,3899,3911,3913,3943,3982-3983,3990,3998,4007,4022-4023,4089,4092,4098,4265,4285 /modules/branches/2.4:1-5079,5090,5093,5097-5118,5120-5170,5172,5174,5176-5182,5184-5199,5202-5203,5205-5211,5239,5271-5272,5312,5383,5516,5544-5545,5548-5549,5555,5564,5570,5572-5574,5576-5578,5596,5606-5610,5612,5615-5618,5623-5624,5628,5630-5642,5644-5646,5648-5651,5653-5654,5656-5657,5660,5687-5699,5701-5702,5704-5715,5723-5727,5729-5730,5733-5741,5752-5753,5756,5830-5831,5842-5843,5881,6280
  • modules/branches/2.3/recordings/functions.inc.php

    r4251 r6281  
    115115                $fname = $filename; 
    116116        } 
     117        $displayname = addslashes($displayname); 
    117118        sql("INSERT INTO recordings values ('', '$displayname', '$fname', 'No long description available')"); 
    118119        return true; 
     
    123124 
    124125        // Update the descriptive fields 
    125         $results = sql("UPDATE recordings SET displayname = \"$rname\", description = \"$descr\" WHERE id = \"$id\""); 
     126        $results = sql("UPDATE recordings SET displayname = '".addslashes($rname)."', description = '".addslashes($descr)."' WHERE id = \"$id\""); 
    126127         
    127128        // Build the file list from _REQUEST 
  • modules/branches/2.3/recordings/module.xml

    r5113 r6281  
    22        <rawname>recordings</rawname> 
    33        <name>Recordings</name> 
    4         <version>3.3.5.4</version> 
     4        <version>3.3.5.5</version> 
    55        <candisable>no</candisable> 
    66        <canuninstall>no</canuninstall> 
     
    99        <description>Creates and manages system recordings, used by many other modules (eg, IVR).</description> 
    1010        <changelog> 
     11                *3.3.5.5* #2988 fix potential SQL injection 
    1112                *3.3.5.4* #2426 remove non-functioning download link 
    1213                *3.3.5.3* #2409 syntax error in audio.php could cause playback problems 
Donate



Support
Download
Develop
Forums
News
Documentation
Paid Support
About

Paid Ads