diff --git a/html/fid.php b/html/fid.php index 7f6a186ae..9feb250e0 100644 --- a/html/fid.php +++ b/html/fid.php @@ -117,7 +117,7 @@ if ( isset($_SESSION['isValid']) && $_SESSION['isValid'] == 1) /* store the answer in an array and transform it later into a JSON object */ $tmp=array(); $tmp[]=array('flabel',$fLabel); - $tmp[]=array('name',$name); + $tmp[]=array('name',h($name)); $tmp[]=array('ftva_id',$fTva_id); $tmp[]=array('tva_id',$tva_id); $tmp[]=array('fPrice_sale',$fPrice_sale); diff --git a/html/fid_card.php b/html/fid_card.php index c85e6e518..9de8b902a 100644 --- a/html/fid_card.php +++ b/html/fid_card.php @@ -68,7 +68,6 @@ if ( $jrn != -1 ) { case 'cred': $filter_jrn=$cn->make_list("select jrn_def_fiche_cred from jrn_def where jrn_def_id=$1",array($jrn)); $filter_card=($filter_jrn != "")?" and fd_id in ($filter_jrn)":' and false '; - break; case 'deb': $filter_jrn=$cn->make_list("select jrn_def_fiche_deb from jrn_def where jrn_def_id=$1",array($jrn)); @@ -106,13 +105,14 @@ $sql_str="select f_id, vw_name,quick_code,vw_description ". $sql=$cn->get_array($sql_str ,array($_REQUEST['FID'],$_REQUEST['FID'],$_REQUEST['FID'])); + if (sizeof($sql) != 0 ) { echo "