PHP check_str函数代码示例

            $db->exec(check_sql($sql));
            unset($sql);
        }
    }
}
unset($prep_statement);
//add recordings to the database
if (is_dir($_SESSION['switch']['recordings']['dir'] . '/' . $_SESSION['domain_name'] . '/')) {
    if ($dh = opendir($_SESSION['switch']['recordings']['dir'] . '/' . $_SESSION['domain_name'] . '/')) {
        while (($recording_filename = readdir($dh)) !== false) {
            if (filetype($_SESSION['switch']['recordings']['dir'] . "/" . $_SESSION['domain_name'] . "/" . $recording_filename) == "file") {
                if (!in_array($recording_filename, $array_recordings)) {
                    //file not found in db, add it
                    $recording_uuid = uuid();
                    $recording_name = ucwords(str_replace('_', ' ', pathinfo($recording_filename, PATHINFO_FILENAME)));
                    $recording_description = check_str(base64_decode($_GET['rd']));
                    $sql = "insert into v_recordings ";
                    $sql .= "(";
                    $sql .= "domain_uuid, ";
                    $sql .= "recording_uuid, ";
                    $sql .= "recording_filename, ";
                    $sql .= "recording_name, ";
                    $sql .= "recording_description ";
                    if ($_SESSION['recordings']['storage_type']['text'] == 'base64') {
                        $sql .= ", recording_base64 ";
                    }
                    $sql .= ")";
                    $sql .= "values ";
                    $sql .= "(";
                    $sql .= "'" . $domain_uuid . "', ";
                    $sql .= "'" . $recording_uuid . "', ";

            $sql .= "and invoice_uuid = '{$invoice_uuid}' ";
            $db->exec(check_sql($sql));
            unset($sql);
            //set redirect
            $_SESSION['message'] = $text['message-update'];
            header("Location: " . ($back != '' ? $back : "invoices.php"));
            exit;
        }
        //if ($action == "update")
    }
    //if ($_POST["persistformvar"] != "true")
}
//(count($_POST)>0 && strlen($_POST["persistformvar"]) == 0)
//pre-populate the form
if (count($_GET) > 0 && $_POST["persistformvar"] != "true") {
    $invoice_uuid = check_str($_GET["id"]);
    $sql = "select * from v_invoices ";
    $sql .= "where domain_uuid = '{$domain_uuid}' ";
    $sql .= "and invoice_uuid = '{$invoice_uuid}' ";
    $prep_statement = $db->prepare(check_sql($sql));
    $prep_statement->execute();
    $result = $prep_statement->fetchAll(PDO::FETCH_NAMED);
    foreach ($result as &$row) {
        $invoice_number = $row["invoice_number"];
        $invoice_type = $row["invoice_type"];
        $invoice_date = $row["invoice_date"];
        $invoice_paid = $row["invoice_paid"];
        $invoice_paid_date = $row["invoice_paid_date"];
        $invoice_paid_method = $row["invoice_paid_method"];
        $invoice_paid_method_ref = $row["invoice_paid_method_ref"];
        $contact_uuid_from = $row["contact_uuid_from"];

            usleep(rand(1000000, 3000000));
            //1-3 seconds.
            $content = 'Authorization Required';
            header("Content-Length: " . strval(strlen($content)));
            echo $content;
            exit;
        }
    }
}
//if password was defined in the system -> variables page then require the password.
if (strlen($provision['password']) > 0) {
    //deny access if the password doesn't match
    if ($provision['password'] != check_str($_REQUEST['password'])) {
        //log the failed auth attempt to the system, to be available for fail2ban.
        openlog('FusionPBX', LOG_NDELAY, LOG_AUTH);
        syslog(LOG_WARNING, '[' . $_SERVER['REMOTE_ADDR'] . "] provision attempt bad password for " . check_str($_REQUEST['mac']));
        closelog();
        usleep(rand(1000000, 3000000));
        //1-3 seconds.
        echo "access denied 4";
        return;
    }
}
//output template to string for header processing
$prov = new provision();
$prov->domain_uuid = $domain_uuid;
$prov->mac = $mac;
$prov->file = $file;
$file_contents = $prov->render();
//deliver the customized config over HTTP/HTTPS
//need to make sure content-type is correct

require_once "resources/check_auth.php";
if (permission_exists('fax_log_view')) {
    //access granted
} else {
    echo "access denied";
    exit;
}
//add multi-lingual support
require_once "app_languages.php";
foreach ($text as $key => $value) {
    $text[$key] = $value[$_SESSION['domain']['language']['code']];
}
//pre-populate the form
if (isset($_REQUEST["id"]) && isset($_REQUEST["fax_uuid"])) {
    $fax_log_uuid = check_str($_REQUEST["id"]);
    $fax_uuid = check_str($_REQUEST["fax_uuid"]);
    $sql = "select * from v_fax_logs ";
    $sql .= "where domain_uuid = '" . $domain_uuid . "' ";
    $sql .= "and fax_log_uuid = '" . $fax_log_uuid . "' ";
    $prep_statement = $db->prepare(check_sql($sql));
    $prep_statement->execute();
    $result = $prep_statement->fetchAll(PDO::FETCH_NAMED);
    foreach ($result as &$row) {
        $fax_log_uuid = $row["fax_log_uuid"];
        $fax_success = $row["fax_success"];
        $fax_result_code = $row["fax_result_code"];
        $fax_result_text = $row["fax_result_text"];
        $fax_file = $row["fax_file"];
        $fax_ecm_used = $row["fax_ecm_used"];
        $fax_local_station_id = $row["fax_local_station_id"];
        $fax_document_transferred_pages = $row["fax_document_transferred_pages"];

	Portions created by the Initial Developer are Copyright (C) 2008-2012
	the Initial Developer. All Rights Reserved.

	Contributor(s):
	Mark J Crane <markjcrane@fusionpbx.com>
	James Rose <james.o.rose@gmail.com>
*/
include "root.php";
require_once "resources/require.php";
require_once "resources/check_auth.php";
if (permission_exists('script_editor_save')) {
    //access granted
} else {
    echo "access denied";
    exit;
}
//add multi-lingual support
$language = new text();
$text = $language->get();
//get the uuid from http values
$clip_uuid = check_str($_GET["id"]);
//delete the clip
if (strlen($_GET["id"]) > 0) {
    $sql = "delete from v_clips ";
    $sql .= "where clip_uuid = '" . $clip_uuid . "' ";
    $prep_statement = $db->prepare(check_sql($sql));
    $prep_statement->execute();
    unset($sql, $db);
}
//redirect the browser
header("Location: clipoptions.php");

function process_xml_cdr($db, $leg, $xml_string)
{
    //set global variable
    global $debug;
    //fix the xml by escaping the contents of <sip_full_XXX>
    $xml_string = preg_replace_callback("/<([^><]+)>(.*?[><].*?)<\\/\\g1>/", function ($matches) {
        var_dump($matches);
        return '<' . $matches[1] . '>' . str_replace(">", "&gt;", str_replace("<", "&lt;", $matches[2])) . '</' . $matches[1] . '>';
    }, $xml_string);
    //parse the xml to get the call detail record info
    try {
        xml_cdr_log($xml_string);
        $xml = simplexml_load_string($xml_string);
        xml_cdr_log("\nxml load done\n");
    } catch (Exception $e) {
        echo $e->getMessage();
        xml_cdr_log("\nfail loadxml: " . $e->getMessage() . "\n");
    }
    //prepare the database object
    require_once "resources/classes/database.php";
    $database = new database();
    $database->table = "v_xml_cdr";
    //misc
    $uuid = check_str(urldecode($xml->variables->uuid));
    $database->fields['uuid'] = $uuid;
    $database->fields['accountcode'] = check_str(urldecode($xml->variables->accountcode));
    $database->fields['default_language'] = check_str(urldecode($xml->variables->default_language));
    $database->fields['bridge_uuid'] = check_str(urldecode($xml->variables->bridge_uuid));
    //$database->fields['digits_dialed'] = check_str(urldecode($xml->variables->digits_dialed));
    $database->fields['sip_hangup_disposition'] = check_str(urldecode($xml->variables->sip_hangup_disposition));
    $database->fields['pin_number'] = check_str(urldecode($xml->variables->pin_number));
    //time
    $database->fields['start_epoch'] = check_str(urldecode($xml->variables->start_epoch));
    $start_stamp = check_str(urldecode($xml->variables->start_stamp));
    $database->fields['start_stamp'] = $start_stamp;
    $database->fields['answer_stamp'] = check_str(urldecode($xml->variables->answer_stamp));
    $database->fields['answer_epoch'] = check_str(urldecode($xml->variables->answer_epoch));
    $database->fields['end_epoch'] = check_str(urldecode($xml->variables->end_epoch));
    $database->fields['end_stamp'] = check_str(urldecode($xml->variables->end_stamp));
    $database->fields['duration'] = check_str(urldecode($xml->variables->duration));
    $database->fields['mduration'] = check_str(urldecode($xml->variables->mduration));
    $database->fields['billsec'] = check_str(urldecode($xml->variables->billsec));
    $database->fields['billmsec'] = check_str(urldecode($xml->variables->billmsec));
    //codecs
    $database->fields['read_codec'] = check_str(urldecode($xml->variables->read_codec));
    $database->fields['read_rate'] = check_str(urldecode($xml->variables->read_rate));
    $database->fields['write_codec'] = check_str(urldecode($xml->variables->write_codec));
    $database->fields['write_rate'] = check_str(urldecode($xml->variables->write_rate));
    $database->fields['remote_media_ip'] = check_str(urldecode($xml->variables->remote_media_ip));
    $database->fields['hangup_cause'] = check_str(urldecode($xml->variables->hangup_cause));
    $database->fields['hangup_cause_q850'] = check_str(urldecode($xml->variables->hangup_cause_q850));
    //call center
    $database->fields['cc_side'] = check_str(urldecode($xml->variables->cc_side));
    $database->fields['cc_member_uuid'] = check_str(urldecode($xml->variables->cc_member_uuid));
    $database->fields['cc_queue_joined_epoch'] = check_str(urldecode($xml->variables->cc_queue_joined_epoch));
    $database->fields['cc_queue'] = check_str(urldecode($xml->variables->cc_queue));
    $database->fields['cc_member_session_uuid'] = check_str(urldecode($xml->variables->cc_member_session_uuid));
    $database->fields['cc_agent'] = check_str(urldecode($xml->variables->cc_agent));
    $database->fields['cc_agent_type'] = check_str(urldecode($xml->variables->cc_agent_type));
    $database->fields['waitsec'] = check_str(urldecode($xml->variables->waitsec));
    //app info
    $database->fields['last_app'] = check_str(urldecode($xml->variables->last_app));
    $database->fields['last_arg'] = check_str(urldecode($xml->variables->last_arg));
    //conference
    $database->fields['conference_name'] = check_str(urldecode($xml->variables->conference_name));
    $database->fields['conference_uuid'] = check_str(urldecode($xml->variables->conference_uuid));
    $database->fields['conference_member_id'] = check_str(urldecode($xml->variables->conference_member_id));
    //call quality
    $rtp_audio_in_mos = check_str(urldecode($xml->variables->rtp_audio_in_mos));
    if (strlen($rtp_audio_in_mos) > 0) {
        $database->fields['rtp_audio_in_mos'] = $rtp_audio_in_mos;
    }
    //get the values from the callflow.
    $x = 0;
    foreach ($xml->callflow as $row) {
        if ($x == 0) {
            $context = check_str(urldecode($row->caller_profile->context));
            $database->fields['destination_number'] = check_str(urldecode($row->caller_profile->destination_number));
            $database->fields['context'] = $context;
            $database->fields['network_addr'] = check_str(urldecode($row->caller_profile->network_addr));
        }
        $database->fields['caller_id_name'] = check_str(urldecode($row->caller_profile->caller_id_name));
        $database->fields['caller_id_number'] = check_str(urldecode($row->caller_profile->caller_id_number));
        $x++;
    }
    unset($x);
    //store the call leg
    $database->fields['leg'] = $leg;
    //store the call direction
    $database->fields['direction'] = check_str(urldecode($xml->variables->call_direction));
    //store post dial delay, in milliseconds
    $database->fields['pdd_ms'] = check_str(urldecode($xml->variables->progress_mediamsec) + urldecode($xml->variables->progressmsec));
    //get break down the date to year, month and day
    $tmp_time = strtotime($start_stamp);
    $tmp_year = date("Y", $tmp_time);
    $tmp_month = date("M", $tmp_time);
    $tmp_day = date("d", $tmp_time);
    //get the domain values from the xml
    $domain_name = check_str(urldecode($xml->variables->domain_name));
    $domain_uuid = check_str(urldecode($xml->variables->domain_uuid));
//.........这里部分代码省略.........

require_once "resources/check_auth.php";
require_once "config.php";
if (permission_exists('content_edit')) {
    //access granted
} else {
    echo "access denied";
    exit;
}
//add multi-lingual support
$language = new text();
$text = $language->get();
//move down more than one level at a time
//update v_rss set rss_order = (rss_order+1) where rss_order > 2 or rss_order = 2
if (count($_GET) > 0) {
    $rss_uuid = check_str($_GET["rss_uuid"]);
    $rss_order = check_str($_GET["rss_order"]);
    $sql = "SELECT rss_order FROM v_rss ";
    $sql .= "where domain_uuid  = '{$domain_uuid}' ";
    $sql .= "and rss_category  = '{$rss_category}' ";
    $sql .= "order by rss_order desc ";
    $sql .= "limit 1 ";
    //echo $sql."<br><br>";
    //return;
    $prep_statement = $db->prepare(check_sql($sql));
    $prep_statement->execute();
    $result = $prep_statement->fetchAll(PDO::FETCH_NAMED);
    foreach ($result as &$row) {
        //print_r( $row );
        $highestrss_order = $row[rss_order];
    }
    unset($prep_statement);

//send the fax
$continue = false;
if (!$included) {
    if ($_POST['action'] == "send") {
        $fax_numbers = $_POST['fax_numbers'];
        $fax_uuid = check_str($_POST["id"]);
        $fax_caller_id_name = check_str($_POST['fax_caller_id_name']);
        $fax_caller_id_number = check_str($_POST['fax_caller_id_number']);
        $fax_header = check_str($_POST['fax_header']);
        $fax_sender = check_str($_POST['fax_sender']);
        $fax_recipient = check_str($_POST['fax_recipient']);
        $fax_subject = check_str($_POST['fax_subject']);
        $fax_message = check_str($_POST['fax_message']);
        $fax_resolution = check_str($_POST['fax_resolution']);
        $fax_page_size = check_str($_POST['fax_page_size']);
        $fax_footer = check_str($_POST['fax_footer']);
        $continue = true;
    }
} else {
    //all necessary local and session variables should
    //be already set by now by file including this one
    $continue = true;
}
// cleanup numbers
if (isset($fax_numbers)) {
    foreach ($fax_numbers as $index => $fax_number) {
        fax_split_dtmf($fax_number, $fax_dtmf);
        $fax_number = preg_replace("~[^0-9]~", "", $fax_number);
        $fax_dtmf = preg_replace("~[^0-9Pp*#]~", "", $fax_dtmf);
        if ($fax_number != '') {
            if ($fax_dtmf != '') {

*/
require_once "root.php";
require_once "resources/require.php";
require_once "resources/check_auth.php";
if (permission_exists('voicemail_view')) {
    //access granted
} else {
    echo "access denied";
    exit;
}
//add multi-lingual support
$language = new text();
$text = $language->get();
//retrieve order by
$order_by = check_str($_GET["order_by"]);
$order = check_str($_GET["order"]);
//set the voicemail id and voicemail uuid arrays
if (isset($_SESSION['user']['extension'])) {
    foreach ($_SESSION['user']['extension'] as $index => $row) {
        if (strlen($row['number_alias']) > 0) {
            $voicemail_ids[$index]['voicemail_id'] = $row['number_alias'];
        } else {
            $voicemail_ids[$index]['voicemail_id'] = $row['user'];
        }
    }
}
if (isset($_SESSION['user']['voicemail'])) {
    foreach ($_SESSION['user']['voicemail'] as $row) {
        if (strlen($row['voicemail_uuid']) > 0) {
            $voicemail_uuids[]['voicemail_uuid'] = $row['voicemail_uuid'];
        }

        $prep_statement_accountcode->execute();
        $row_accountcode = $prep_statement_accountcode->fetch(PDO::FETCH_ASSOC);
        if ($row_accountcode['count'] > 0) {
            $broadcast_accountcode = check_str($_POST["broadcast_accountcode"]);
        } else {
            $broadcast_accountcode = $_SESSION['domain_name'];
        }
        unset($sql_accountcode, $prep_statement_accountcode, $row_accountcode);
    } else {
        $broadcast_accountcode = $_SESSION['domain_name'];
    }
}
if (count($_POST) > 0 && strlen($_POST["persistformvar"]) == 0) {
    $msg = '';
    if ($action == "update") {
        $call_broadcast_uuid = check_str($_POST["call_broadcast_uuid"]);
    }
    //check for all required data
    if (strlen($broadcast_name) == 0) {
        $msg .= "" . $text['confirm-name'] . "<br>\n";
    }
    //if (strlen($broadcast_description) == 0) { $msg .= "Please provide: Description<br>\n"; }
    //if (strlen($broadcast_timeout) == 0) { $msg .= "Please provide: Timeout<br>\n"; }
    //if (strlen($broadcast_concurrent_limit) == 0) { $msg .= "Please provide: Concurrent Limit<br>\n"; }
    //if (strlen($recording_uuid) == 0) { $msg .= "Please provide: Recording<br>\n"; }
    //if (strlen($broadcast_caller_id_name) == 0) { $msg .= "Please provide: Caller ID Name<br>\n"; }
    //if (strlen($broadcast_caller_id_number) == 0) { $msg .= "Please provide: Caller ID Number<br>\n"; }
    //if (strlen($broadcast_destination_type) == 0) { $msg .= "Please provide: Type<br>\n"; }
    //if (strlen($broadcast_phone_numbers) == 0) { $msg .= "Please provide: Phone Number List<br>\n"; }
    //if (strlen($broadcast_avmd) == 0) { $msg .= "Please provide: Voicemail Detection<br>\n"; }
    //if (strlen($broadcast_destination_data) == 0) { $msg .= "Please provide: Destination<br>\n"; }

include "root.php";
require_once "resources/require.php";
require_once "resources/check_auth.php";
if (permission_exists('device_add')) {
    //access granted
} else {
    echo "access denied";
    exit;
}
//add multi-lingual support
$language = new text();
$text = $language->get();
//set the http get/post variable(s) to a php variable
if (isset($_REQUEST["id"]) && isset($_REQUEST["mac"])) {
    $device_uuid = check_str($_REQUEST["id"]);
    $mac_address_new = check_str($_REQUEST["mac"]);
    $mac_address_new = preg_replace('#[^a-fA-F0-9./]#', '', $mac_address_new);
}
//set the default
$save = true;
//check to see if the mac address exists
if ($mac_address_new == "" || $mac_address_new == "000000000000") {
    //allow duplicates to be used as templaes
} else {
    $sql = "SELECT count(*) AS num_rows FROM v_devices ";
    $sql .= "WHERE device_mac_address = '" . $mac_address_new . "' ";
    $prep_statement = $db->prepare($sql);
    if ($prep_statement) {
        $prep_statement->execute();
        $row = $prep_statement->fetch(PDO::FETCH_ASSOC);
        if ($row['num_rows'] == "0") {

    if ($action == "add") {
        //save the message to a session variable
        $_SESSION['message'] = $text['message-add'];
        //redirect the browser
        header("Location: ring_group_edit.php?id={$ring_group_uuid}");
        exit;
    }
    if ($action == "update") {
        //save the message to a session variable
        $_SESSION['message'] = $text['message-update'];
    }
}
//(count($_POST)>0 && strlen($_POST["persistformvar"]) == 0)
//pre-populate the form
if (strlen($ring_group_uuid) == 0) {
    $ring_group_uuid = check_str($_GET["id"]);
}
if (strlen($ring_group_uuid) > 0) {
    $sql = "select * from v_ring_groups ";
    $sql .= "where domain_uuid = '" . $_SESSION['domain_uuid'] . "' ";
    $sql .= "and ring_group_uuid = '{$ring_group_uuid}' ";
    $prep_statement = $db->prepare(check_sql($sql));
    $prep_statement->execute();
    $result = $prep_statement->fetchAll();
    foreach ($result as &$row) {
        $ring_group_name = $row["ring_group_name"];
        $ring_group_extension = $row["ring_group_extension"];
        $ring_group_context = $row["ring_group_context"];
        $ring_group_strategy = $row["ring_group_strategy"];
        $ring_group_timeout_app = $row["ring_group_timeout_app"];
        $ring_group_timeout_data = $row["ring_group_timeout_data"];

require_once "resources/check_auth.php";
if (permission_exists('menu_delete')) {
    //access granted
} else {
    echo "access denied";
    return;
}
//add multi-lingual support
$language = new text();
$text = $language->get();
if (count($_GET) > 0) {
    //clear the menu session so it will rebuild with the update
    $_SESSION["menu"] = "";
    //get the menu uuid
    $menu_uuid = check_str($_GET["id"]);
    $menu_item_uuid = check_str($_GET["menu_item_uuid"]);
    //delete the item in the menu
    $sql = "delete from v_menu_items ";
    $sql .= "where menu_item_uuid = '{$menu_item_uuid}' ";
    $sql .= "and menu_uuid = '{$menu_uuid}' ";
    $db->exec(check_sql($sql));
    unset($sql);
    //delete the menu item groups
    $sql = "delete from v_menu_item_groups ";
    $sql .= "where menu_item_uuid = '{$menu_item_uuid}' ";
    $sql .= "and menu_uuid = '{$menu_uuid}' ";
    $db->exec(check_sql($sql));
    unset($sql);
    //delete the menu item language
    $sql = "delete from v_menu_languages ";
    $sql .= "where menu_uuid = '{$menu_uuid}' ";

//includes
require_once "root.php";
require_once "resources/require.php";
//check permissions
require_once "resources/check_auth.php";
if (permission_exists('device_vendor_function_delete')) {
    //access granted
} else {
    echo "access denied";
    exit;
}
//add multi-lingual support
$language = new text();
$text = $language->get();
//get the id
if (count($_GET) > 0) {
    $id = check_str($_GET["id"]);
    $device_vendor_uuid = check_str($_GET["device_vendor_uuid"]);
}
//delete the data
if (strlen($id) > 0) {
    //delete device_vendor_function
    $sql = "delete from v_device_vendor_functions ";
    $sql .= "where device_vendor_function_uuid = '{$id}' ";
    $prep_statement = $db->prepare(check_sql($sql));
    $prep_statement->execute();
    unset($sql);
}
//redirect the user
$_SESSION['message'] = $text['message-delete'];
header('Location: device_vendor_function_edit.php?id=' . $device_vendor_uuid);

                break;
            case 'greaterorequal':
                $mos_comparison = ">=";
                break;
            case 'equal':
                $mos_comparison = "<";
                break;
            case 'notequal':
                $mos_comparison = "<>";
                break;
        }
    } else {
        $mos_comparison = '';
    }
    //$mos_comparison = check_str($_REQUEST["mos_comparison"]);
    $mos_score = check_str($_REQUEST["mos_score"]);
}
//build the sql where string
if ($missed == true) {
    $sql_where_ands[] = "billsec = '0'";
}
if (strlen($start_epoch) > 0 && strlen($stop_epoch) > 0) {
    $sql_where_ands[] = "start_epoch BETWEEN " . $start_epoch . " AND " . $stop_epoch . " ";
}
if (strlen($cdr_id) > 0) {
    $sql_where_ands[] = "cdr_id like '%" . $cdr_id . "%'";
}
if (strlen($direction) > 0) {
    $sql_where_ands[] = "direction = '" . $direction . "'";
}
if (strlen($caller_id_name) > 0) {