Moderators: gerski, enjay, williamconley, Op3r, Staydog, gardo, mflorell, MJCoate, mcargile, Kumba, Michael_N
--- trunk_1821/www/vicidial/admin_listloader_fourth_gen.php 2012-05-29 10:05:29.756907468 +0200
+++ trunk/www/vicidial/admin_listloader_fourth_gen.php 2012-05-29 10:12:44.221058179 +0200
@@ -45,10 +45,11 @@
# 120221-0140 - Added User Group restrictions
# 120223-2318 - Removed logging of good login passwords if webroot writable is enabled
# 120402-2128 - Added template options
+# 120525-1038 - Added uploaded filename filtering
#
-$version = '2.4-44';
-$build = '120402-2128';
+$version = '2.4-45';
+$build = '120525-1038';
require("dbconnect.php");
@@ -153,6 +154,8 @@
### REGEX to prevent weird characters from ending up in the fields
$field_regx = "['\"`\\;]";
+$lead_file = preg_replace("/;|:|\/|\^|\[|\]|\"|\'|\*/","",$lead_file);
+$leadfile_name = preg_replace("/;|:|\/|\^|\[|\]|\"|\'|\*/","",$leadfile_name);
$vicidial_list_fields = '|lead_id|vendor_lead_code|source_id|list_id|gmt_offset_now|called_since_last_reset|phone_code|phone_number|title|first_name|middle_initial|last_name|address1|address2|address3|city|state|province|postal_code|country_code|gender|date_of_birth|alt_phone|email|security_phrase|comments|called_count|last_local_call_time|rank|owner|entry_list_id|';
rrb555 wrote:@DomeDan
problem are with revision 1822 and 1823
1821 is a working build
have u tested using revision 1822 and 1823?
boybawang wrote:Verified working as well
Users browsing this forum: Bing [Bot] and 49 guests