search

Star2Billing / a2billing

A2Billing is a telecom switch and billing system capable of providing and billing a range of telecom products and services to customers such as calling card products, residential and wholesale VoIP termination, DID resale and callback services.
www.asterisk2billing.org
Other
180 stars 174 forks source link

restriction easy faked by using speeddial #97

Closed arheops closed 9 years ago

arheops commented 9 years ago

so in Class.A2Billing.php at line near 906 you are dooing following:

1) check restricted number. 2) if check not success, change speeddial to any number(so restriction will not be checked after that)

solution: swap sections, put speeddial substitute BEFORE restriction check.

bugs seams vital )

areski commented 9 years ago

Thanks! Fixed with https://github.com/Star2Billing/a2billing/commit/a40e37fefef7ab85999d04298b6e582b41930e7e