admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Remove $_REQUEST[PHPSESSID] it is now replaced by the cookie

Browse source 
a flag in .htaccess must be set
php_flag session.use_only_cookies on
php_flag session.use_cookies 1
This commit is contained in:
Dany De Bontridder 2010-05-11 23:30:03 +00:00
parent b4186b3ca0
commit 2059ddb70e
82 changed files with 174 additions and 314 deletions
Download patch file Download diff file Expand all files Collapse all files

31
html/admin/setup.php
View file

@ -82,6 +82,11 @@ if ( strpos($inc_path,";") != 0 ) {
set_include_path($new_path);
require_once('config_file.php');
include_once('constant.php');
require_once('class_database.php');
include_once('debug.php');
include_once('ac_common.php');
/* The config file is created here */
if (isset($_POST['save_config'])) {
$url=config_file_create($_POST,1,$os);
@ -101,25 +106,17 @@ if ( ! file_exists('..'.DIRECTORY_SEPARATOR.'..'.DIRECTORY_SEPARATOR.'include'.D
echo '</form>';
exit();
}
include_once('constant.php');
require_once('class_database.php');
include_once('debug.php');
include_once('ac_common.php');
/* If htaccess file doesn't exists we create them here
* if os == 1 then windows, 0 means Unix
*/
$file='..'.DIRECTORY_SEPARATOR.'..'.DIRECTORY_SEPARATOR.'include'.DIRECTORY_SEPARATOR.'.htaccess';
if ( ! file_exists ( $file) ) {
$hFile=@fopen($file,'a+');
if ( ! $hFile ) exit('Impossible d\'&eacute;crire dans le r&eacute;pertoire include');
fwrite($hFile,'order deny,allow'."\n");
fwrite($hFile,'deny from all'."\n");
fclose($hFile);
}
$hFile=@fopen($file,'a+');
if ( ! $hFile ) exit('Impossible d\'&eacute;crire dans le r&eacute;pertoire include');
fwrite($hFile,'order deny,allow'."\n");
fwrite($hFile,'deny from all'."\n");
fclose($hFile);
$file='..'.DIRECTORY_SEPARATOR.'.htaccess';
if ( ! file_exists ( $file) ) {
$hFile=@fopen($file,'a+');
if ( ! $hFile ) exit('Impossible d\'&eacute;crire dans le r&eacute;pertoire html');
$array=array("php_flag magic_quotes_gpc off",
@ -132,8 +129,8 @@ if ( ! file_exists ( $file) ) {
"php_flag short_open_tag on",
"php_value upload_max_filesize 10M",
"php_value session.use_trans_sid 1",
"php_value session.use_cookies 0",
"php_flag session.use_only_cookies off");
"php_value session.use_cookies 1",
"php_flag session.use_only_cookies on");
if ( $os == 0 )
fwrite($hFile,'php_value include_path .;..\..\include;..\include;addon'."\n");
@ -141,15 +138,13 @@ if ( ! file_exists ( $file) ) {
fwrite($hFile,'php_value include_path .:../../include:../include:addon'."\n");
foreach ($array as $value ) fwrite($hFile,$value."\n");
fclose($hFile);
copy ($file,'.htaccess');
echo '
<form method="post" >
Les informations sont sauv&eacute;es vous pouvez continuer
<input type="submit" value="Continuer">
</form>';
exit();
}
//----------------------------------------------------------------------
// End functions
//

1
html/ajax.php
View file

@ -6,7 +6,6 @@
* Required variable in $_REQUEST
* - gDossier
* - code
* - PHPSESSID
*/
require_once('class_database.php');
require_once('class_user.php');

11
html/ajax_card.php
View file

@ -27,7 +27,6 @@
{'ctl':'','html':''}
\endverbatim
* The parameters are
* - PHPSESSID
* - gDossier
* - op
- dc Detail of a card
@ -60,7 +59,7 @@ require_once('function_javascript.php');
require_once('ac_common.php');
require_once ('class_user.php');
$var=array('PHPSESSID','gDossier','op','ctl');
$var=array('gDossier','op','ctl');
$cont=0;
/* check if mandatory parameters are given */
foreach ($var as $v) {
@ -95,7 +94,7 @@ case 'bc':
$f=new Fiche($cn);
$popup=str_replace('_content','',$ctl);
$r.='<form id="save_card" method="POST" onsubmit="this.ipopup=\''.$popup.'\';save_card(this);return false;" >';
$r.=dossier::hidden();$r.=HtmlInput::phpsessid();
$r.=dossier::hidden();
$r.=(isset($ref))?HtmlInput::hidden('ref',1):'';
$r.=HtmlInput::hidden('fd_id',$fd_id);
$r.=HtmlInput::hidden('ctl',$ctl);
@ -131,7 +130,7 @@ case 'st':
$isel->value=$array;
$popup=str_replace('_content','',$ctl);
$r.='<form id="sel_type" method="GET" onsubmit="this.ipopup=\''.$popup.'\';dis_blank_card(this);return false;" >';
$r.=dossier::hidden();$r.=HtmlInput::phpsessid();
$r.=dossier::hidden();
$r.=(isset($ref))?HtmlInput::hidden('ref',1):'';
$r.='<p>choisissez le type de fiche à ajouter</p>';
$r.=$isel->input();
@ -171,7 +170,7 @@ case 'fs':
$r.=_('Fiche contenant');
$r.=$q->input();
$r.=HtmlInput::submit('fs',_('Recherche'));
$r.=dossier::hidden().HtmlInput::phpsessid().HtmlInput::hidden('op','fs');
$r.=dossier::hidden().HtmlInput::hidden('op','fs');
$array=array();
foreach (array('query','inp','jrn','label','typecard','price','tvaid') as $i) {
if (isset(${$i}) ){
@ -253,7 +252,7 @@ case 'ac':
$html.= '<div class="u_content">';
$html.=$ctl;
$html.= '<form id="newcat" name="newcat" method="post" onsubmit="this.ipopup=\''.$ipopup.'\';save_card_category(this);return false;">';
$html.= dossier::hidden().HtmlInput::phpsessid();
$html.= dossier::hidden();
$html.=HtmlInput::hidden('cat',$cat);
$search=new IPoste("class_base");
$search->size=40;

8
html/ajax_extension.php
View file

@ -24,7 +24,7 @@
* \brief this file answer to ajax
* parameters :
* - action =de details extension
* parameters : dossier, phpsessid and ex_id
* parameters : dossier, and ex_id
*
*
*/
@ -43,7 +43,7 @@ $user=new User($cn);
set_language();
$user->check(true);$user->check_dossier(dossier::id(),true);
if ($user->check_action(EXTENSION)==0 ) exit;
$var=array('PHPSESSID','gDossier','action');
$var=array('gDossier','action');
$cont=0;
/* check if mandatory parameters are given */
foreach ($var as $v) {
@ -86,7 +86,7 @@ switch($action) {
$str_enable=$enable->input();
$r.='<div style="overflow:auto;">';
$r.='<form id="formext" onsubmit="extension_save(this);return false">';
$r.=dossier::hidden().HtmlInput::phpsessid();
$r.=dossier::hidden();
/* property of the extension */
ob_start();
require_once('template/extension-detail.php');
@ -143,7 +143,7 @@ switch($action) {
$str_enable=$enable->input();
$r.='<div style="overflow:auto">';
$r.='<form id="formext" onsubmit="extension_save(this);return false;">';
$r.=dossier::hidden().HtmlInput::phpsessid();
$r.=dossier::hidden();
ob_start();
require_once('template/extension-detail.php');
$r.=ob_get_contents();

6
html/ajax_misc.php
View file

@ -23,7 +23,6 @@
/*!\file
* \brief this file respond to an ajax request
* The parameters are
* - PHPSESSID
* - gDossier
* - $op operation the file has to execute
* Part 1
@ -42,7 +41,7 @@ require_once('function_javascript.php');
require_once('ac_common.php');
require_once ('class_user.php');
$var=array('PHPSESSID','gDossier');
$var=array('gDossier');
$cont=0;
/* check if mandatory parameters are given */
foreach ($var as $v) {
@ -70,7 +69,6 @@ switch($op)
$html="";
$html=$cal->display();
$html=escape_xml($html);
header('Content-type: text/xml; charset=UTF-8');
echo <<<EOF
<?xml version="1.0" encoding="UTF-8"?>
@ -221,7 +219,6 @@ jr_comment,j_montant, j_debit,jr_internal from jrnx join jrn on (j_grpt=jr_grpt_
$r.='<form method="get" id="search_form" onsubmit="search_letter(this);return false">';
$r.='<div style="float:left;">';
// needed hidden var
$r.=HtmlInput::phpsessid();
$r.=dossier::hidden();
if ( isset($_REQUEST['p_action'])) $r.=HtmlInput::hidden('p_action',$_REQUEST['p_action']);
if ( isset($_REQUEST['sa'])) $r.=HtmlInput::hidden('sa',$_REQUEST['sa']);
@ -300,7 +297,6 @@ jr_comment,j_montant, j_debit,jr_internal from jrnx join jrn on (j_grpt=jr_grpt_
$form='<div id="result" style="float:top;clear:both">';
$form.='<FORM METHOD="post">';
$form.=HtmlInput::phpsessid();
$form.=dossier::hidden();
if ( isset($_REQUEST['p_action'])) $form.=HtmlInput::hidden('p_action',$_REQUEST['p_action']);
if ( isset($_REQUEST['sa'])) $form.=HtmlInput::hidden('sa',$_REQUEST['sa']);

4
html/ajax_poste.php
View file

@ -40,7 +40,7 @@ require_once('function_javascript.php');
require_once('class_acc_account_ledger.php');
extract($_REQUEST);
$var=array('PHPSESSID','gDossier','op','ctl');
$var=array('gDossier','op','ctl');
$cont=0;
/* check if mandatory parameters are given */
foreach ($var as $v) {
@ -79,7 +79,7 @@ case "sf":
require_once('template/account_search.php');
$r.=ob_get_contents();
ob_clean();
$r.=dossier::hidden();$r.=HtmlInput::phpsessid();
$r.=dossier::hidden();
$r.=(isset ($c))?HtmlInput::hidden('account',$c):"";
$r.=(isset ($l))?HtmlInput::hidden('label',$l):"";
$r.=(isset ($j))?HtmlInput::hidden('jrn',$j):"";

2
html/annulation.php
View file

@ -445,7 +445,7 @@ $operation->jr_id=$element;
$w=new IButton();
$w->label=$operation->get_internal();
$w->javascript="modifyOperation('".$element."','".$_REQUEST['PHPSESSID']."',".dossier::id().
$w->javascript="modifyOperation('".$element."',".dossier::id().
','.$_REQUEST['p_jrn'].",'S')";
echo $w->input().'<br>';
}//for

1
html/compute.php
View file

@ -29,7 +29,6 @@
* - q for quantity
* - n for number of the ctrl
* - gDossier
* - PHPSESSID
* Must return at least tva, htva and tvac
*/

2
html/extension.php
View file

@ -62,7 +62,7 @@ if ( $only_plugin != 'P' ) {
// user with only plugin cannot go back to the dashboard
/* return button */
$msg=_('Retour au tableau de bord');
$hidden=dossier::hidden().HtmlInput::phpsessid();
$hidden=dossier::hidden();
echo <<<EOF
<div style="position:absolute;top:3px;left:3px" class="noprint">
<form method="get" action="access.php" style="display:inline">

1
html/fid.php
View file

@ -31,7 +31,6 @@
* - p field for the price (sale)
* - b field for the price (purchase)
* - FID is the QuickCode
* - PHPSESSID
*\note if the j is -1 then all the card are shown
*/

1
html/get_pj.php
View file

@ -25,7 +25,6 @@
* the value :
* - l for ledger
* - gDossier
* - PHPSESSID
* Must return at least tva, htva and tvac
*/

1
html/get_predef.php
View file

@ -25,7 +25,6 @@
* the value :
* - l for ledger
* - gDossier
* - PHPSESSID
* Must return at least tva, htva and tvac
*/

5
html/import.php
View file

@ -58,9 +58,6 @@ echo JS_AJAX_FICHE;
echo '<div class="lmenu">';
ShowMenuImport();
echo '</div>';
if ( isset( $_REQUEST['PHPSESSID'])) {
$sessid = $_REQUEST['PHPSESSID'];
}
// if action is set proceed to it
@ -98,7 +95,7 @@ if ( isset ($_GET["action"]) ) {
$ip->type=OPEN;
$ip->javascript="onchange=submit(this)";
echo '<form method="get" action="import.php" >';
echo dossier::hidden().HtmlInput::phpsessid();
echo dossier::hidden();
echo HtmlInput::hidden('action','transfer');
echo _('Choississez la période à transfèrer');
echo $ip->input();

42
html/js/acc_ledger.js
View file

@ -30,9 +30,8 @@
*/
function update_predef(p_type,p_direct) {
var jrn=g("p_jrn").value;
var phpsessid=g("phpsessid").value;
var dossier=g("gDossier").value;
var querystring='?PHPSESSID='+phpsessid+'&gDossier='+dossier+'&l='+jrn+'&t='+p_type+'&d='+p_direct;
var querystring='?&gDossier='+dossier+'&l='+jrn+'&t='+p_type+'&d='+p_direct;
g("p_jrn_predef").value=jrn;
var action=new Ajax.Request(
"get_predef.php",
@ -73,9 +72,8 @@ function error_get_predef(request,json) {
*/
function update_pj() {
var jrn=g("p_jrn").value;
var phpsessid=g("phpsessid").value;
var dossier=g("gDossier").value;
var querystring='?PHPSESSID='+phpsessid+'&gDossier='+dossier+'&l='+jrn;
var querystring='?&gDossier='+dossier+'&l='+jrn;
var action=new Ajax.Request(
"get_pj.php",
{
@ -113,7 +111,6 @@ function ledger_fin_add_row(){
var mytable=g("fin_item").tBodies[0];
var line=mytable.rows.length;
var row=mytable.insertRow(line);
var phpsessid=g("phpsessid");
var nb=g("nb_item");
var rowToCopy=mytable.rows[1];
var nNumberCell=rowToCopy.cells.length;
@ -143,7 +140,6 @@ function ledger_add_row(){
var line=mytable.rows.length;
var nCell=9;
var row=mytable.insertRow(line);
var phpsessid=g("phpsessid");
var nb=g("nb_item");
for (var e=0;e<nCell;e++) {
var newCell=row.insertCell(e);
@ -169,11 +165,10 @@ new_tt.evalScripts();
}
/**
* @brief compute the sum of a purchase, update the span tvac, htva and tva
* all the needed data are taken from the document (hidden field : phpsessid and gdossier)
* all the needed data are taken from the document (hidden field : gdossier)
* @param the number of the changed ctrl
*/
function compute_ledger(p_ctl_nb) {
var phpsessid=g("phpsessid").value;
var dossier=g("gDossier").value;
var a=-1;
if ( document.getElementById("e_march"+p_ctl_nb+'_tva_amount')) {
@ -198,7 +193,7 @@ function compute_ledger(p_ctl_nb) {
g('e_quant'+p_ctl_nb).value=trim(g('e_quant'+p_ctl_nb).value);
var quantity=g('e_quant'+p_ctl_nb).value;
var querystring='?PHPSESSID='+phpsessid+'&gDossier='+dossier+'&c='+qcode+'&t='+tva_id+'&p='+price+'&q='+quantity+'&n='+p_ctl_nb;
var querystring='?&gDossier='+dossier+'&c='+qcode+'&t='+tva_id+'&p='+price+'&q='+quantity+'&n='+p_ctl_nb;
$('sum').hide();
var action=new Ajax.Request(
"compute.php",
@ -323,7 +318,6 @@ function quick_writing_add_row(){
var oRow=mytable.insertRow(nNumberRow);
var rowToCopy=mytable.rows[1];
var nNumberCell=rowToCopy.cells.length;
var phpsessid=g("phpsessid");
var nb=g("nb_item");
var oNewRow = mytable.insertRow(nNumberRow);
@ -346,21 +340,20 @@ function quick_writing_add_row(){
* \brief
* open a windows to confirm and cancel an operation
*/
function cancelOperation(p_value,p_sessid,p_dossier,p_jrn)
function cancelOperation(p_value,p_dossier,p_jrn)
{
var win=window.open('annulation.php?p_jrn='+p_jrn+'&jrn_op='+p_value+'&PHPSESSID='+p_sessid+'&gDossier='+p_dossier,'Annule','toolbar=no,width=400,height=400,scrollbars=yes,resizable=yes');
var win=window.open('annulation.php?p_jrn='+p_jrn+'&jrn_op='+p_value+'&gDossier='+p_dossier,'Annule','toolbar=no,width=400,height=400,scrollbars=yes,resizable=yes');
}
function RefreshMe() {
window.location.reload();
}
/*! \brief this function search into the ledger
* \param p_sessid PHPSESSID
* \param p_ctl ctl name
* \param p_montant amount to search (if 0 get it from the e_other_amount
*/
function SearchJrn(p_sessid,p_dossier,p_ctl,p_montant,p_paid)
function SearchJrn(p_dossier,p_ctl,p_montant,p_paid)
{
var url='jrn_search.php?p_ctl='+p_ctl+'&PHPSESSID='+p_sessid+'&gDossier='+p_dossier+'&'+p_paid;
var url='jrn_search.php?p_ctl='+p_ctl+'&gDossier='+p_dossier+'&'+p_paid;
if ( p_montant == 0 ) {
@ -437,30 +430,28 @@ return true;
/*!\brief
* \param p_value jrn.jr_id
* \param p_sessid PHPSESSID
* \param p_jrn ledger number
* \param p_vue easy or expert view of the operation
*/
function modifyOperation(p_value,p_sessid,p_dossier,p_jrn,p_vue)
function modifyOperation(p_value,p_dossier,p_jrn,p_vue)
{
var win=window.open('modify_op.php?action=update&p_jrn='+p_jrn+'&line='+p_value+'&PHPSESSID='+p_sessid+'&p_view='+p_vue+'&gDossier='+p_dossier,'','toolbar=no,width=720,height=510,scrollbars=yes,resizable=yes');
var win=window.open('modify_op.php?action=update&p_jrn='+p_jrn+'&line='+p_value+'&p_view='+p_vue+'&gDossier='+p_dossier,'','toolbar=no,width=720,height=510,scrollbars=yes,resizable=yes');
win.focus();
}
/*!\brief
* \param p_value jrn.jr_id
* \param p_sessid PHPSESSID
*/
function viewOperation(p_value,p_sessid,p_dossier)
function viewOperation(p_value,p_dossier)
{
var win=window.open('modify_op.php?action=view_ca&line='+p_value+'&PHPSESSID='+p_sessid+'&gDossier='+p_dossier,'','toolbar=no,width=690,height=410,scrollbars=yes,resizable=yes');
var win=window.open('modify_op.php?action=view_ca&line='+p_value+'&gDossier='+p_dossier,'','toolbar=no,width=690,height=410,scrollbars=yes,resizable=yes');
win.focus();
}
function dropLink(p_value,p_value2,p_sessid,p_dossier) {
var win=window.open('modify_op.php?action=delete&line='+p_value+'&line2='+p_value2+'&PHPSESSID='+p_sessid+'&gDossier='+p_dossier,'Liaison','toolbar=no,width=500,height=400,scrollbars=yes,resizable=yes');
function dropLink(p_value,p_value2,p_dossier) {
var win=window.open('modify_op.php?action=delete&line='+p_value+'&line2='+p_value2+'&gDossier='+p_dossier,'Liaison','toolbar=no,width=500,height=400,scrollbars=yes,resizable=yes');
}
/**
*@brief this function is called before the querystring is send to the
@ -478,11 +469,11 @@ function filter_card(obj,queryString){
/**
*@brief to display the lettering for the operation, call
* ajax function
*@param obj object attribut : phpsessid, gDossier,j_id,obj_type
*@param obj object attribut : gDossier,j_id,obj_type
*/
function dsp_letter(obj) {
try {
var queryString='?gDossier='+obj.gDossier+'&PHPSESSID='+obj.phpsessid+'&j_id='+obj.j_id+'&op=dl'+'&ot='+this.obj_type;
var queryString='?gDossier='+obj.gDossier+'&j_id='+obj.j_id+'&op=dl'+'&ot='+this.obj_type;
var action=new Ajax.Request(
"ajax_misc.php",
{
@ -526,7 +517,6 @@ function search_letter(obj) {
try {
var str_query='';
if (obj.elements['gDossier'] ) str_query='gDossier='+obj.elements['gDossier'].value;
if (obj.elements['phpsessid'] ) str_query+='&PHPSESSID='+obj.elements['phpsessid'].value;
if (obj.elements['j_id'] ) str_query+='&j_id='+obj.elements['j_id'].value;
if (obj.elements['ot'] ) str_query+='&ot='+obj.elements['ot'].value;
if (obj.elements['op'] ) str_query+='&op='+obj.elements['op'].value;

10
html/js/acc_report.js
View file

@ -26,9 +26,8 @@
/**
* @brief add a line in the form for the report
* @param p_dossier dossier id to connect
* @param p_sessid session id
*/
function rapport_add_row(p_dossier,p_sessid){
function rapport_add_row(p_dossier){
style='style="border: 1px solid blue;"';
var table=$("rap1");
var line=table.rows.length;
@ -48,17 +47,16 @@ function rapport_add_row(p_dossier,p_sessid){
// Search Button
var cellSearch = row.insertCell(3);
cellSearch.innerHTML='<input type="button" value="Recherche Poste" onclick="SearchPoste(\''+p_sessid+'\','+p_dossier+',\'form'+line+'\',\'\',\'poste\',\'N\')" class="inp"/>';
cellSearch.innerHTML='<input type="button" value="Recherche Poste" onclick="SearchPoste('+p_dossier+',\'form'+line+'\',\'\',\'poste\',\'N\')" class="inp"/>';
}
/**
* @brief create a file to export a report
* @param p_sessid the Session id
* @param p_dossier the dossier id
*/
function report_export(p_sessid,p_dossier,p_fr_id) {
var queryString="?PHPSESSID="+p_sessid+"&gDossier="+p_dossier+"&f="+p_fr_id;
function report_export(p_dossier,p_fr_id) {
var queryString="?&gDossier="+p_dossier+"&f="+p_fr_id;
var action=new Ajax.Request(
"ajax_report.php",
{

11
html/js/accounting_item.js
View file

@ -38,9 +38,9 @@ function set_jrn_parent(p_ctl,p_value) {
}
function PcmnUpdate(p_value,p_lib,p_parent,p_type,p_sessid,p_dossier)
function PcmnUpdate(p_value,p_lib,p_parent,p_type,p_dossier)
{
var win=window.open('line_update.php?l='+p_value+'&n='+p_lib+'&p='+p_parent+'&m'+p_type+'&PHPSESSID='+p_sessid+'&gDossier='+p_dossier,'Modifie','toolbar=no,width=500,height=400,scrollbars=yes,resizable=yes');
var win=window.open('line_update.php?l='+p_value+'&n='+p_lib+'&p='+p_parent+'&m'+p_type+'&gDossier='+p_dossier,'Modifie','toolbar=no,width=500,height=400,scrollbars=yes,resizable=yes');
}
/**
*@brief show the popup for search an accounting item
@ -56,10 +56,9 @@ function PcmnUpdate(p_value,p_lib,p_parent,p_type,p_sessid,p_dossier)
function search_poste(obj) {
showIPopup(obj.ipopup);
var dossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
var queryString="?gDossier="+dossier;
queryString+="&PHPSESSID="+phpsessid;
queryString+="&op=sf";
try {
if ( obj.jrn) { queryString+="&j="+obj.jrn;}
@ -100,10 +99,8 @@ function search_poste(obj) {
*/
function search_get_poste(obj) {
var dossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
var queryString="?gDossier="+dossier;
queryString+="&PHPSESSID="+phpsessid;
queryString+="&op=sf";
if ( obj.elements['jrn'] ) { queryString+="&j="+$F('jrn');}

13
html/js/ajax_fiche.js
View file

@ -54,7 +54,6 @@ function errorFid(request,json) {
function ajaxFid(p_ctl)
{
var gDossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
var jrn=$(p_ctl).jrn;
$(p_ctl).value=$(p_ctl).value.toUpperCase();
if ( jrn == undefined ) { if ($('p_jrn')!=undefined) {jrn=$('p_jrn').value; } }
@ -74,7 +73,7 @@ function ajaxFid(p_ctl)
if ( $(p_ctl).purchase) { queryString+='&b='+$(p_ctl).purchase;}
if ( $(p_ctl).typecard) { queryString+='&d='+$(p_ctl).typecard;}
queryString=queryString+"&j="+jrn+'&gDossier='+gDossier;
queryString=queryString+'&ctl='+p_ctl.id+'&PHPSESSID='+phpsessid;
queryString=queryString+'&ctl='+p_ctl.id;
var action=new Ajax.Request (
"fid.php",
@ -127,16 +126,15 @@ function ajax_error_saldo(request,json) {
}
/*!\brief this function get the saldo
* \param p_ctl the ctrl where we take the quick_code
* \param phpsessid
*/
function ajax_saldo(phpsessid,p_ctl)
function ajax_saldo(p_ctl)
{
var gDossier=$('gDossier').value;
var ctl_value=trim($(p_ctl).value);
var jrn=$('p_jrn').value;
queryString="?FID="+ctl_value;
queryString=queryString+'&gDossier='+gDossier+'&j='+jrn;
queryString=queryString+'&ctl='+ctl_value+'&PHPSESSID='+phpsessid;
queryString=queryString+'&ctl='+ctl_value;
/* alert(queryString); */
var action=new Ajax.Request (
"get_saldo.php",
@ -159,16 +157,15 @@ function ajax_success_saldo(request,json) {
}
/*!\brief this function get data from ajax_card.php and fill the hidden div with the return html string
* \param phpsessid
* \param p_dossier
* \param f_id fiche.f_id
* \param p_operation what to do : op : history of operation
* \param ctl : id of the div to show
* \param page
*/
function ajax_card(phpsessid,p_dossier,f_id,p_operation,ctl,page) {
function ajax_card(p_dossier,f_id,p_operation,ctl,page) {
$(ctl).show();
var queryString="PHPSESSID="+phpsessid+"&gDossier="+p_dossier+"&f_id="+f_id+"&op="+p_operation+"&p="+page+'&ctl='+ctl;
var queryString="gDossier="+p_dossier+"&f_id="+f_id+"&op="+p_operation+"&p="+page+'&ctl='+ctl;
var action = new Ajax.Request(
"ajax_card.php" , { method:'get', parameters:queryString,onFailure:ajax_get_failure,onSuccess:ajax_get_success}
);

10
html/js/anc_script.js
View file

@ -106,7 +106,6 @@ function verify_ca(p_style) {
}
/*!
* \brief open a window for searching a CA account,
* \param p_sessid PHPSESSID
* \param p_dossier dossier id
* \param p_target ctrl to update
* \param p_source ctrl containing the pa_id
@ -114,10 +113,10 @@ function verify_ca(p_style) {
*
* \return
*/
function search_ca (p_sessid,p_dossier,p_target,p_source)
function search_ca (p_dossier,p_target,p_source)
{
var pa_id=g(p_source).value;
var url="?PHPSESSID="+p_sessid+"&gDossier="+p_dossier+"&c1="+p_target+"&c2="+pa_id;
var url="?gDossier="+p_dossier+"&c1="+p_target+"&c2="+pa_id;
var a=window.open("search_ca.php"+url,"CA recherche",'statusbar=no,scrollbars=yes,toolbar=no');
a.focus();
}
@ -171,14 +170,13 @@ function caod_checkTotal() {
/**
*@brief remove an operation
*@param p_sessid is the PHPSESSID
*@param p_dossier is the folder
*@param p_oa_group is the group of the analytic operation
*/
function op_remove(p_sessid,p_dossier,p_oa_group) {
function op_remove(p_dossier,p_oa_group) {
var a=confirm("Etes-vous sur de vouloir effacer cette operation ?\n");
if ( a == false ) return;
var obj={"PHPSESSID":p_sessid,"oa":p_oa_group,"gDossier":p_dossier};
var obj={"oa":p_oa_group,"gDossier":p_dossier};
queryString=encodeJSON(obj);
g(p_oa_group).style.display='none';
var e=new Ajax.Request("remove_op.php",

15
html/js/bq_import.js
View file

@ -23,12 +23,11 @@
*/
/*! \brief import : update a record (in ajax)
* \param $p_sessid : PHPSESSID
* \param $p_dossier : the dossier id
* \param $p_count : the item number
*/
function import_update(p_sessid,p_dossier,p_count) {
var query_string="PHPSESSID="+p_sessid+"&count="+p_count+"&gDossier="+p_dossier;
function import_update(p_dossier,p_count) {
var query_string="count="+p_count+"&gDossier="+p_dossier;
var code=$("code"+p_count);
var poste=$("poste"+p_count);
var concerned=$("e_concerned"+p_count);
@ -51,13 +50,12 @@ function import_update(p_sessid,p_dossier,p_count) {
form.hide();
}
/*! \brief remove : remove a record (in ajax)
* \param $p_sessid : PHPSESSID
* \param $p_dossier : the dossier id
* \param $p_count : the item number
*/
function import_remove(p_sessid,p_dossier,p_count) {
var query_string="PHPSESSID="+p_sessid+"&count="+p_count+"&gDossier="+p_dossier;
function import_remove(p_dossier,p_count) {
var query_string="count="+p_count+"&gDossier="+p_dossier;
var code=$("code"+p_count);
var url="ajax_import.php";
query_string+="&code="+code.value;
@ -77,13 +75,12 @@ function import_remove(p_sessid,p_dossier,p_count) {
form.hide();
}
/*! \brief remove : remove a record (in ajax)
* \param $p_sessid : PHPSESSID
* \param $p_dossier : the dossier id
* \param $p_count : the item number
*/
function import_not_confirmed(p_sessid,p_dossier,p_count) {
var query_string="PHPSESSID="+p_sessid+"&count="+p_count+"&gDossier="+p_dossier;
function import_not_confirmed(p_dossier,p_count) {
var query_string="count="+p_count+"&gDossier="+p_dossier;
var code=$("code"+p_count);
var url="ajax_import.php";
query_string+="&code="+code.value;

22
html/js/card.js
View file

@ -37,7 +37,6 @@
function search_card(obj) {
try{
var gDossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
var inp=obj.inp;
var label=obj.label;
var typecard=obj.typecard;
@ -47,7 +46,7 @@ function search_card(obj) {
if ( jrn==undefined) {
jrn=$('p_jrn').value;
}
var query=encodeJSON({'gDossier':gDossier,'PHPSESSID':phpsessid,
var query=encodeJSON({'gDossier':gDossier,
'inp':inp,'label':label,'price':price,'tvaid':tvaid,
'ctl':obj.popup,'op':'fs','jrn':jrn,
'typecard':typecard
@ -73,10 +72,8 @@ function search_card(obj) {
*/
function search_get_card(obj) {
var dossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
var queryString="?gDossier="+dossier;
queryString+="&PHPSESSID="+phpsessid;
queryString+="&op=fs";
if ( obj.elements['inp'] ) { queryString+="&inp="+$F('inp');}
@ -161,8 +158,6 @@ function errorFid(request,json) {
alert('erreur : ajax fiche');
}
function update_value(text,li) {
var phpsessid=$('phpsessid').value;
if ( ! phpsessid ) { alert ('Il manque HIDDEN PHPSESSID');}
}
/**
@ -190,7 +185,7 @@ function fill_data(text,li) {
*/
function fill_fin_data_onchange(ctl) {
ajaxFid(ctl);
ajax_saldo($('phpsessid'),ctl.id);
ajax_saldo(ctl.id);
}
/**
*@brief is called when something change in ICard
@ -199,7 +194,7 @@ ajax_saldo($('phpsessid'),ctl.id);
*/
function fill_fin_data(text,li) {
ajaxFid(text);
ajax_saldo($('phpsessid'),text.id);
ajax_saldo($(text.id));
}
/**
*@brief show the ipopup window and display the details of a card,
@ -215,7 +210,6 @@ function fill_ipopcard(obj) {
$(content).innerHTML='<image src="image/loading.gif" alt="chargement"></image>';
showIPopup($(obj).ipopup);
var dossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
var qcode='';
if ( $(obj).qcode != undefined ) {
qcode=obj.qcode;
@ -224,7 +218,6 @@ function fill_ipopcard(obj) {
}
// ctl=$(obj).id;
var queryString='?gDossier='+dossier;
queryString+='&PHPSESSID='+phpsessid;
queryString+='&qcode='+qcode;
queryString+='&ctl='+content;
queryString+='&op=dc'; // dc for detail card
@ -275,11 +268,9 @@ function select_card_type(obj) {
$(content).innerHTML='<image src="image/loading.gif" alt="chargement"></image>';
showIPopup($(obj).ipopup);
var dossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
var filter=$(obj).filter;
if ( filter==undefined) {filter=-1;}
var queryString='?gDossier='+dossier;
queryString+='&PHPSESSID='+phpsessid;
queryString+='&ctl='+content;
queryString+='&op=st'; // st for selecting type
if ( $(obj).win_refresh!=undefined) { queryString+='&ref';}
@ -315,10 +306,8 @@ function dis_blank_card(obj) {
$(content).innerHTML='<image src="image/loading.gif" alt="chargement"></image>';
showIPopup($(obj).ipopup);
var dossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
var queryString='?gDossier='+dossier;
queryString+='&PHPSESSID='+phpsessid;
queryString+='&ctl='+content;
queryString+='&fd_id='+fd_id;
queryString+=ref;
@ -347,9 +336,7 @@ function save_card(obj) {
$(content).innerHTML='<image src="image/loading.gif" alt="chargement"></image>';
showIPopup($(obj).ipopup);
var dossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
var queryString='?gDossier='+dossier;
queryString+='&PHPSESSID='+phpsessid;
queryString+='&ctl='+content;
queryString+=data;
queryString+='&op=sc'; // sc for save card
@ -373,9 +360,7 @@ function add_category(obj){
// show ipopup
showIPopup(obj.ipopup);
var dossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
var queryString='?gDossier='+dossier;
queryString+='&PHPSESSID='+phpsessid;
queryString+='&op=ac';
queryString+='&ctl='+obj.ipopup+'_content';
if ( obj.type_cat) { queryString+='&cat='+obj.type_cat;}
@ -401,7 +386,6 @@ function save_card_category(obj) {
$(content).innerHTML='<image src="image/loading.gif" alt="chargement"></image>';
showIPopup($(obj).ipopup);
var dossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
var queryString='?';
queryString+='&ctl='+content+'&';
queryString+=data;

4
html/js/confirm.js
View file

@ -25,8 +25,8 @@
*/
// \brief Confirm the removal of a template
function confirm_remove(p_phpsessid,p_obj_id,p_type) {
function confirm_remove(p_obj_id,p_type) {
var
a=open('confirm_remove.php?PHPSESSID='+p_phpsessid+'&ob_id='+p_obj_id+'&p_type='+p_type,'Confirmez effacement','toolbar=no,width=500,height=400,scrollbars=yes,resizable=yes');
a=open('confirm_remove.php?ob_id='+p_obj_id+'&p_type='+p_type,'Confirmez effacement','toolbar=no,width=500,height=400,scrollbars=yes,resizable=yes');
}

8
html/js/extension.js
View file

@ -29,10 +29,8 @@
*/
function detail_extension(p_code){
var dossier=$("gDossier").value;
var phpsessid=$("phpsessid").value;
showIPopup("dtext");
var queryString='?gDossier='+dossier;
queryString+='&PHPSESSID='+phpsessid;
queryString+='&ex_id='+p_code;
queryString+='&action=de'; // de for detail extension
@ -50,10 +48,8 @@ function detail_extension(p_code){
*/
function new_extension(){
var dossier=$("gDossier").value;
var phpsessid=$('phpsessid').value;
showIPopup("dtext");
var queryString='?gDossier='+dossier;
queryString+='&PHPSESSID='+phpsessid;
queryString+='&action=ne'; // ne for new extension
var action=new Ajax.Request ( 'ajax_extension.php',
@ -93,9 +89,7 @@ function extDetail(req){
function extension_save(p_obj_form){
try{
var dossier=$("gDossier").value;
var phpsessid=$('phpsessid').value;
var queryString='?gDossier='+dossier;
queryString+='&PHPSESSID='+phpsessid;
queryString+='&action=se'; // se save extension
// Data must be taken here
try{
@ -142,9 +136,7 @@ function successSave(req){
}
function extension_remove(ex_id) {
var dossier=$("gDossier").value;
var phpsessid=$('phpsessid').value;
var queryString='?gDossier='+dossier;
queryString+='&PHPSESSID='+phpsessid;
queryString+='&ex_id='+ex_id;
queryString+='&action=re'; // re for remove extension
var action=new Ajax.Request ( 'ajax_extension.php',

5
html/js/gestion.js
View file

@ -28,12 +28,11 @@
/**
*@brief remove an attached document of an action
*@param phpsessid
*@param dossier
*@param dt_id id of the document (pk document:d_id)
*/
function remove_document(p_sessid,p_dossier,p_id) {
queryString="?PHPSESSID="+p_sessid+"&gDossier="+p_dossier+"&a=rm&d_id="+p_id;
function remove_document(p_dossier,p_id) {
queryString="?gDossier="+p_dossier+"&a=rm&d_id="+p_id;
var action=new Ajax.Request (
"show_document.php",
{

19
html/js/scripts.js
View file

@ -175,13 +175,12 @@ function toggleHideShow(p_obj,p_button) {
}
/**
*@brief open popup with the search windows
*@param p_sessid,the PHPSESSID
*@param p_dossier the dossier where to search
*@param p_style style of the detail value are E for expert or S for simple
*/
function openRecherche(p_sessid,p_dossier,p_style) {
function openRecherche(p_dossier,p_style) {
if ( p_style == 'E' ) { p_style="expert";}
var w=window.open("recherche.php?gDossier="+p_dossier+"&PHPSESSID="+p_sessid+'&'+p_style,'','statusbar=no,scrollbars=yes,toolbar=no');
var w=window.open("recherche.php?gDossier="+p_dossier+'&'+p_style,'','statusbar=no,scrollbars=yes,toolbar=no');
w.focus();
}
/**
@ -237,7 +236,7 @@ function getNodeText(xmlNode)
*@param object select
*/
function change_month(obj) {
var queryString="PHPSESSID="+obj.phpsessid+"&gDossier="+obj.gDossier+"&op=cal"+"&per="+obj.value;
var queryString="gDossier="+obj.gDossier+"&op=cal"+"&per="+obj.value;
var action = new Ajax.Request(
"ajax_misc.php" , { method:'get', parameters:queryString,onFailure:ajax_misc_failure,onSuccess:change_month_success}
);
@ -270,8 +269,8 @@ function ajax_misc_failure() {
/**
*@brief remove a document_modele
*/
function cat_doc_remove(p_dt_id,phpsessid,p_dossier) {
var queryString="PHPSESSID="+phpsessid+"&gDossier="+p_dossier+"&op=rem_cat_doc"+"&dt_id="+p_dt_id;
function cat_doc_remove(p_dt_id,p_dossier) {
var queryString="gDossier="+p_dossier+"&op=rem_cat_doc"+"&dt_id="+p_dt_id;
var action = new Ajax.Request(
"ajax_misc.php" , { method:'get', parameters:queryString,onFailure:ajax_misc_failure,onSuccess:success_cat_doc_remove}
);
@ -291,12 +290,12 @@ function success_cat_doc_remove(req) {
}
/**
*@brief display the popup with vat and explanation
*@param obj with 4 attributes gdossier, ctl,popup and phpsessid
*@param obj with 4 attributes gdossier, ctl,popup
*/
function popup_select_tva(obj) {
try {
showIPopup(obj.popup);
var queryString="PHPSESSID="+obj.phpsessid+"&gDossier="+obj.gDossier+"&op=dsp_tva"+"&ctl="+obj.ctl+'&popup='+obj.popup;
var queryString="gDossier="+obj.gDossier+"&op=dsp_tva"+"&ctl="+obj.ctl+'&popup='+obj.popup;
if ( obj.jcode )
queryString+='&code='+obj.jcode;
if (obj.compute)
@ -331,11 +330,11 @@ function success_popup_select_tva(req) {
}
/**
*@brief display the popup with vat and explanation
*@param obj with 4 attributes gdossier, ctl,popup and phpsessid
*@param obj with 4 attributes gdossier, ctl,popup
*/
function set_tva_label(obj) {
try {
var queryString="PHPSESSID="+obj.phpsessid+"&gDossier="+obj.gDossier+"&op=label_tva"+"&id="+obj.value;
var queryString="gDossier="+obj.gDossier+"&op=label_tva"+"&id="+obj.value;
if ( obj.jcode )
queryString+='&code='+obj.jcode;
var action = new Ajax.Request(

8
html/js/todo_list.js
View file

@ -21,19 +21,18 @@
/*!\file
* \brief this file contains all the javascript needed by the todo_list.
* it requires prototype.js. The calling page must have the phpsessid and
* it requires prototype.js. The calling page must have
* the gDossier
*
*/
function todo_list_show(p_id) {
var gDossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
try {
var action=new Ajax.Request(
'todo_list.php',
{
method:'get',
parameters:{'show':1,'id':p_id,'PHPSESSID':phpsessid,'gDossier':gDossier},
parameters:{'show':1,'id':p_id,'gDossier':gDossier},
onFailure:todo_list_show_error,
onSuccess:todo_list_show_success
}
@ -77,13 +76,12 @@ function todo_list_remove(p_ctl) {
if ( confirm('Effacer ?') == false ) {return;}
$("tr"+p_ctl).hide();
var gDossier=$('gDossier').value;
var phpsessid=$('phpsessid').value;
var action=new Ajax.Request(
'todo_list.php',
{
method:'get',
parameters:{'del':1,'id':p_ctl,'PHPSESSID':phpsessid,'gDossier':gDossier}
parameters:{'del':1,'id':p_ctl,'gDossier':gDossier}
}
);
return false;

4
html/login.php
View file

@ -41,7 +41,7 @@ if ( isset ($_POST["p_user"] ) ) {
$User=new User($rep);
$User->Check();
echo "<META HTTP-EQUIV=\"REFRESH\" content=\"0;url=user_login.php?PHPSESSID=" . $_REQUEST["PHPSESSID"] . "\">";
echo "<META HTTP-EQUIV=\"REFRESH\" content=\"0;url=user_login.php\">";
} else
{
@ -50,7 +50,7 @@ if ( isset ($_POST["p_user"] ) ) {
$User=new User($rep);
$User->Check();
echo "<META HTTP-EQUIV=\"REFRESH\" content=\"0;url=user_login.php?PHPSESSID=" . $_REQUEST["PHPSESSID"] . "\">";
echo "<META HTTP-EQUIV=\"REFRESH\" content=\"0;url=user_login.php\">";
// }
}
html_page_stop();

2
html/parametre.php
View file

@ -129,7 +129,7 @@ echo_debug("parametre",__LINE__,$_POST);
// divers
//-----------------------------------------------------
if ( $p_action == 'divers') {
$s=dossier::get().'&PHPSESSID='.$_REQUEST['PHPSESSID'];
$s=dossier::get();
$array = array (
array('parametre.php?p_action=divers&sa=mp&'.$s,_('Moyen de paiement'),_('Moyen de paiement'),2),

3
html/recherche.php
View file

@ -55,9 +55,6 @@ include_once ('class_user.php');
$User=new User($cn);
$User->Check();
// PhpSessid
$sessid=$_REQUEST['PHPSESSID'];
// display a search box
$ledger=new Acc_Ledger($cn,0);

2
html/search_ca.php
View file

@ -26,7 +26,7 @@
*
*/
// parameter are gDossier,PHPSESSID , c1 : the control id to update,
// parameter are gDossier , c1 : the control id to update,
// c2 the control id which contains the pa_id
require_once("class_itext.php");
require_once("class_ihidden.php");

2
html/test.php
View file

@ -78,7 +78,6 @@ foreach ($array as $value) {
$r.='</select>';
$r.= Dossier::hidden();
$r.='<input type="submit" value="Testons">';
$r.=HtmlInput::hidden('PHPSESSID',$_REQUEST['PHPSESSID']);
$r.='</form>';
echo $r;
@ -133,7 +132,6 @@ case 18:
Todo_List::test_me();
echo '<script src="js/todo_list.js"></script>';
echo '<form method="get">';
echo HtmlInput::hidden('phpsessid',$_REQUEST['PHPSESSID']);
echo dossier::hidden();
echo 'title : <input type="text" id="p_title"><br>';
echo 'desc : <input type="text" id="p_desc"><br>';

1
include/action.common.inc.php
View file

@ -266,7 +266,6 @@ function ShowActionList($cn,$p_base)
$w->table=0;
$list=$cn->make_list("select fd_id from fiche_def where frd_id in (4,8,9,14,15,16,25)");
$w->extra=$list;
echo HtmlInput::phpsessid();
echo _('Fiche').' :'.$w->search().$w->input().'<br/>';
printf (_('Titre ou référence').': <input type="text" name="query" value="%s">',
$a);

1
include/adm.inc.php
View file

@ -39,7 +39,6 @@ echo js_include('controls.js');
echo js_include('dragdrop.js');
echo JS_CARD;
echo JS_AJAX_FICHE;
echo HtmlInput::phpsessid();
echo ICard::ipopup('ipop_newcard');
$ip_cat=new IPopup('ipop_cat');
$ip_cat->title=_('Ajout d\'une catégorie');

1
include/adm_card.inc.php
View file

@ -99,7 +99,6 @@ if ( $ss_action == 'op') {
if ( $ss_action == 'cn') {
echo '<div class="content">';
echo dossier::hidden();
echo HtmlInput::phpsessid();
$f=new fiche($cn,$_REQUEST['f_id']);
$contact=new Contact($cn);
$contact->company=$f->get_quick_code();

1
include/balance.inc.php
View file

@ -88,7 +88,6 @@ $journal->name="p_jrn";
if ( isset($_POST['p_jrn'])) $journal->selected=$_POST['p_jrn'];
else
$journal->selected=-1;
echo HtmlInput::phpsessid();
echo "Journal = ".$journal->input();
$from_poste=new IPoste();
$from_poste->name="from_poste";

23
include/class_acc_ledger.php
View file

@ -594,7 +594,7 @@ jr_comment||' ('||c_internal||')'||case when jr_pj_number is not null and jr_pj_
if ($Max==0) return array(0,_("Aucun enregistrement trouvé"));
$r.='<table class="result">';
$l_sessid=$_REQUEST['PHPSESSID'];
$r.="<tr >";
$r.="<th>Internal</th>";
@ -652,9 +652,9 @@ jr_comment||' ('||c_internal||')'||case when jr_pj_number is not null and jr_pj_
exit (-1);
}
//DEBUG
// $r.=$l_sessid;
$r.=sprintf('<A class="detail" HREF="javascript:modifyOperation(\'%s\',\'%s\',\'%s\',\'%s\',\'%s\')" >%s</A>',
$row['jr_id'], $l_sessid,$gDossier, $row['jrn_def_id'],$vue, $row['jr_internal']);
$r.=sprintf('<A class="detail" HREF="javascript:modifyOperation(\'%s\',\'%s\',\'%s\',\'%s\')" >%s</A>',
$row['jr_id'], $gDossier, $row['jrn_def_id'],$vue, $row['jr_internal']);
$r.="</TD>";
if ( $this->type=='') $r.=td($row['jrn_def_name']);
// date
@ -727,7 +727,7 @@ jr_comment||' ('||c_internal||')'||case when jr_pj_number is not null and jr_pj_
$operation->jr_id=$element;
$l_amount=$this->db->get_value("select jr_montant from jrn ".
" where jr_id=$element");
$r.= "<A class=\"detail\" HREF=\"javascript:modifyOperation('".$element."','".$l_sessid."',".$gDossier.")\" > ".$operation->get_internal()." [ $l_amount &euro; ]</A>";
$r.= "<A class=\"detail\" HREF=\"javascript:modifyOperation('".$element."',".$gDossier.")\" > ".$operation->get_internal()." [ $l_amount &euro; ]</A>";
}//for
}// if ( $a != null ) {
$r.="</TD>";
@ -740,19 +740,18 @@ jr_comment||' ('||c_internal||')'||case when jr_pj_number is not null and jr_pj_
$r.="<TD>";
// cancel operation
if ( $user->check_action(GEOP)==1)
$r.=sprintf('<input TYPE="BUTTON" class="button" VALUE="%s" onClick="cancelOperation(\'%s\',\'%s\',%d,\'%s\')">',
_("Effacer"),$row['jr_grpt_id'],$l_sessid,$gDossier,$row['jrn_def_id']);
$r.=sprintf('<input TYPE="BUTTON" class="button" VALUE="%s" onClick="cancelOperation(\'%s\',%d,\'%s\')">',
_("Effacer"),$row['jr_grpt_id'],$gDossier,$row['jrn_def_id']);
$r.="</TD>";
} // else
//document
if ( $row['jr_pj_name'] != "")
{
$image='<IMG SRC="image/insert_table.gif" title="'.$row['jr_pj_name'].'" border="0">';
$r.="<TD>".sprintf('<A class="detail" HREF="show_pj.php?jrn=%s&jr_grpt_id=%s&%s&PHPSESSID=%s">%s</A>',
$r.="<TD>".sprintf('<A class="detail" HREF="show_pj.php?jrn=%s&jr_grpt_id=%s&%s">%s</A>',
$row['jrn_def_id'],
$row['jr_grpt_id'],
$str_dossier,
$_REQUEST['PHPSESSID'],
$image)
."</TD>";
}
@ -1295,7 +1294,6 @@ jr_comment||' ('||c_internal||')'||case when jr_pj_number is not null and jr_pj_
$ret.=HtmlInput::hidden('p_jrn',$this->id);
$ret.=dossier::hidden();
$ret.=HtmlInput::hidden('phpsessid',$_REQUEST['PHPSESSID']);
$ret.=HtmlInput::hidden('jrn_type',$this->get_type());
$info= HtmlInput::infobulle(0);
@ -1308,7 +1306,7 @@ jr_comment||' ('||c_internal||')'||case when jr_pj_number is not null and jr_pj_
'<th>'._('Montant').'</th>'.
'<th>'._('Débit').'</th>'.
'</tr>';
$l_sessid=$_REQUEST['PHPSESSID'];
for ($i = 0 ;$i<$nb_row;$i++){
// Quick Code
@ -1994,7 +1992,6 @@ function get_last_date()
$f_paid=new ICheckbox('unpaid');
$f_paid->selected=(isset($_REQUEST['unpaid']))?true:false;
$r.=HtmlInput::hidden('phpsessid',$_REQUEST['PHPSESSID']);
$r.=dossier::hidden();
$r.=HtmlInput::hidden('ledger_type',$this->type);
ob_start();
@ -2013,7 +2010,6 @@ function get_last_date()
* struct array $p_array
\verbatim
(
[phpsessid] => 016710a766b3c7b137ce6ee5bfbacc00
[gDossier] => 13
[p_jrn] => -1
[date_start] =>
@ -2024,7 +2020,6 @@ function get_last_date()
[search] => Rechercher
[p_action] => ven
[sa] => l
[PHPSESSID] => 016710a766b3c7b137ce6ee5bfbacc00
)
\endverbatim
*\return an array with a valid sql statement, an the where clause => array[sql] array[where]

2
include/class_acc_ledger_fin.php
View file

@ -210,7 +210,6 @@ class Acc_Ledger_Fin extends Acc_Ledger {
$r="";
$r.=dossier::hidden();
$r.=HtmlInput::hidden('phpsessid',$_REQUEST['PHPSESSID']);
$f_legend='Banque, caisse';
// Date
//--
@ -530,7 +529,6 @@ class Acc_Ledger_Fin extends Acc_Ledger {
// Hidden variables
//--------------------------------------------------
$r.=dossier::hidden();
$r.=HtmlInput::hidden('phpsessid',$_REQUEST['PHPSESSID']);
$r.=HtmlInput::hidden('p_jrn',$this->id);
$r.=HtmlInput::hidden('nb_item',$nb_item);
$r.=HtmlInput::hidden('last_sold',$last_sold);

1
include/class_acc_ledger_purchase.php
View file

@ -712,7 +712,6 @@ class Acc_Ledger_Purchase extends Acc_Ledger {
$r="";
$r.=dossier::hidden();
$r.=HtmlInput::hidden('phpsessid',$_REQUEST['PHPSESSID']);
$f_legend=_("En-tête facture fournisseur");
$f_legend_detail=_("Détail articles acheté");

1
include/class_acc_ledger_sold.php
View file

@ -861,7 +861,6 @@ class Acc_Ledger_Sold extends Acc_Ledger {
$r='';
$r.=dossier::hidden();
$r.=HtmlInput::hidden('phpsessid',$_REQUEST['PHPSESSID']);
$f_legend=_('En-tête facture client');
$Echeance=new IDate();

1
include/class_acc_parm_code.php
View file

@ -148,7 +148,6 @@ class Acc_Parm_Code {
$r.= '<TD>'.$value->input();
$r.='<span id="p_value_label"></span></td>';
$r.='</tr>';
$r.=HtmlInput::phpsessid();
$r.=Dossier::hidden();
return $r;

3
include/class_acc_report.php
View file

@ -102,7 +102,6 @@ function form($p_line=0) {
$r.= dossier::hidden();
$r.= HtmlInput::hidden('line',$p_line);
$r.= HtmlInput::hidden('fr_id',$this->id);
$r.=HtmlInput::phpsessid();
$wForm=new IText();
$r.="Nom du rapport : ";
$r.=$wForm->input('form_nom',$this->name);
@ -156,7 +155,7 @@ function form($p_line=0) {
$r.= "</TABLE>";
$wButton=new IButton();
$wButton->javascript=" rapport_add_row('".dossier::id()."','".$_REQUEST['PHPSESSID']."')";
$wButton->javascript=" rapport_add_row('".dossier::id()."')";
$wButton->label="Ajout d'une ligne";
$r.=$wButton->input();
return $r;

8
include/class_action.php
View file

@ -368,8 +368,7 @@ class Action
$upload->name="file_upload[]";
$upload->value="";
$aAttachedFile=$this->db->get_array('select d_id,d_filename,d_mimetype,'.
'\'show_document.php?PHPSESSID='.
$_REQUEST['PHPSESSID'].'&'.
'\'show_document.php?'.
Dossier::get().'&d_id=\'||d_id as link'.
' from document where ag_id=$1',
array($this->ag_id));
@ -485,7 +484,6 @@ class Action
/* Add the needed hidden values */
$r.=dossier::hidden();
$r.=HtmlInput::hidden('phpsessid',$_REQUEST['PHPSESSID']);
/* add the number of item */
$Hid=new IHidden();
@ -831,8 +829,8 @@ class Action
$qcode_dest=$fexp->strAttribut(ATTR_DEF_QUICKCODE);
$qexp=($qcode_dest=="- ERROR -")?"Interne":$qcode_dest;
$jsexp=sprintf("javascript:showfiche('%s','%s')",
$_REQUEST['PHPSESSID'],$qexp);
$jsexp=sprintf("javascript:showfiche('%s')",
$qexp);
if ( $qexp != 'Interne' )
{
$r.="<td>$href".$qexp." : ".$fexp->getName().'</a></td>';

4
include/class_anc_balance_double.php
View file

@ -285,11 +285,11 @@ class Anc_Balance_Double extends Anc_Print
$choose=new IButton();
$choose->name="Choix Poste";
$choose->label=_("Recherche");
$choose->javascript="onClick=search_ca('".$_REQUEST['PHPSESSID']."',".dossier::id().",'from_poste2','pa_id2')";
$choose->javascript="onClick=search_ca(".dossier::id().",'from_poste2','pa_id2')";
$r.=$choose->input();
$r.=" et le poste ".$poste->input("to_poste2",$this->to_poste2);
$choose->javascript="onClick=search_ca('".$_REQUEST['PHPSESSID']."',".dossier::id().",'to_poste2','pa_id2')";
$choose->javascript="onClick=search_ca("dossier::id().",'to_poste2','pa_id2')";
$r.=$choose->input();
$r.='<span class="notice" style="display:block">'.
_('Selectionnez le plan qui vous int&eacute;resse avant de cliquer sur Recherche').

8
include/class_anc_operation.php
View file

@ -189,7 +189,7 @@ class Anc_Operation
{
$efface=new IButton();
$efface->javascript="op_remove('".$_REQUEST['PHPSESSID']."',".$gDossier.",".$oldgroup.")";
$efface->javascript="op_remove('".$gDossier.",".$oldgroup.")";
$efface->name="Efface";
$efface->label="Efface";
$ret.="<td>".$efface->input()."</td>";
@ -200,7 +200,7 @@ class Anc_Operation
if ( $jr_id != 0) {
// get the old jr_id
$detail=new IButton();
$detail->javascript="viewOperation($jr_id,'".$_REQUEST['PHPSESSID']."',$gDossier)";
$detail->javascript="viewOperation($jr_id,$gDossier)";
$detail->name="Detail";
$detail->label="Detail";
$ret.="<td>".$detail->input()."</td>";
@ -249,7 +249,7 @@ class Anc_Operation
$efface=new IButton();
$efface->javascript="op_remove('".$_REQUEST['PHPSESSID']."',$gDossier,".$oldgroup.")";
$efface->javascript="op_remove('"."$gDossier,".$oldgroup.")";
$efface->name="Efface";
$efface->label="Efface";
$ret.="<td>".$efface->input()."</td>";
@ -258,7 +258,7 @@ class Anc_Operation
$jr_id=$this->get_jrid();
if ( $jr_id != 0 ){
$detail=new IButton();
$detail->javascript="viewOperation($jr_id,'".$_REQUEST['PHPSESSID']."',$gDossier)";
$detail->javascript="viewOperation($jr_id,'"."$gDossier)";
$detail->name="Detail";
$detail->label="Detail";
$ret.="<td>".$detail->input()."</td>";

4
include/class_anc_print.php
View file

@ -127,11 +127,11 @@ class Anc_Print {
$choose=new IButton();
$choose->name=_("Choix Poste");
$choose->label=_("Recherche");
$choose->javascript="onClick=search_ca('".$_REQUEST['PHPSESSID']."',".dossier::id().",'from_poste','pa_id')";
$choose->javascript="onClick=search_ca(".dossier::id().",'from_poste','pa_id')";
$r.=$choose->input();
$r.=_(" et le poste ").$poste->input("to_poste",$this->to_poste);
$choose->javascript="onClick=search_ca('".$_REQUEST['PHPSESSID']."',".dossier::id().",'to_poste','pa_id')";
$choose->javascript="onClick=search_ca(".dossier::id().",'to_poste','pa_id')";
$r.=$choose->input();
$r.='<span class="notice" style="display:block">'._('Selectionnez le plan qui vous intéresse avant de cliquer sur Recherche').'</span>';

1
include/class_calendar.php
View file

@ -96,7 +96,6 @@ class Calendar {
$wMonth->selected=$this->default_periode;
$wMonth->javascript="onchange=change_month(this)";
$wMonth->set_attribute('gDossier',dossier::id());
$wMonth->set_attribute('phpsessid',$_REQUEST['PHPSESSID']);
$month_year=$wMonth->input().$wMonth->get_js_attr();
ob_start();

3
include/class_contact.php
View file

@ -114,8 +114,7 @@ $back_url=urlencode($_SERVER['REQUEST_URI']);
// add popup for detail
if ( $l_company_name !="")
{
$l_company_name=sprintf("<A HREF=\"javascript:showfiche('%s','%s')\">%s - %s</A>",
$_REQUEST['PHPSESSID'],
$l_company_name=sprintf("<A HREF=\"javascript:showfiche('%s')\">%s - %s</A>",
$contact->strAttribut(ATTR_DEF_COMPANY),
$contact->strAttribut(ATTR_DEF_COMPANY),
$l_company_name

2
include/class_document_type.php
View file

@ -63,7 +63,7 @@ class Document_type
$bt=new IButton('X'.$r[$i]['dt_id']);
$bt->label=_('Effacer');
$bt->javascript="if (confirm('"._('Vous confirmez')."')==true) {";
$bt->javascript.="cat_doc_remove('".$r[$i]['dt_id']."','".$_REQUEST['PHPSESSID']."','".Dossier::id()."');";
$bt->javascript.="cat_doc_remove('".$r[$i]['dt_id']."','".Dossier::id()."');";
$bt->javascript.='}';
$tmp['js_remove']=$bt->input();

7
include/class_html_input.php
View file

@ -188,21 +188,18 @@ echo $string => property={'prop':'1','prop2':'2','prop3':'3'};
static function hidden($p_name,$p_value) {
return '<INPUT TYPE="hidden" id="'.$p_name.'" NAME="'.$p_name.'" VALUE="'.$p_value.'">';
}
static function phpsessid() {
return self::hidden('phpsessid',$_REQUEST['PHPSESSID']);
}
static function extension() {
return self::hidden('code',$_REQUEST['code']);
}
/*!\brief create a button with a ref
*\param $p_label the text
*\param $p_value the location of the window, the PHPSESSID is added, but not the gDossier
*\param $p_value the location of the window,
*\param $p_name the id of the span
*\return string with htmlcode
*/
static function button_anchor($p_label,$p_value,$p_name="") {
$str='&PHPSESSID='.$_REQUEST['PHPSESSID'];
$r=sprintf('<span id="%s"> <A class="button" href="%s" style="color:black;width:75;display:inline">%s</A></span>',
$p_name,
$p_value.$str,

6
include/class_icard.php
View file

@ -32,7 +32,7 @@
* - extra contents the type (all, deb or cred, a list of FD_ID between parent. or a SQL clause
* - attribute are the attribute to set (via ajax). The ledger is either a attribute (jrn) or a
* hidden field in the document, if none are set, there is no filter on the ledger
*\note you must in a hidden field PHPSESSID and the gDossier (dossier::hidden)
*\note you must in a hidden field gDossier (dossier::hidden)
*\see ajaxFid
*\see card.js
*\see fid.php
@ -177,7 +177,7 @@ class ICard extends HtmlInput
$this->value=($p_value==null)?$this->value:$p_value;
if ( $this->readOnly==true) return $this->display();
$l_sessid=$_REQUEST['PHPSESSID'];
$attr=$this->get_js_attr();
@ -204,7 +204,7 @@ class ICard extends HtmlInput
$div=sprintf('<div id="%s_choices" class="autocomplete"></div>',
$this->name);
$query=dossier::get().'&PHPSESSID='.$l_sessid.'&e='.urlencode($this->extra);
$query=dossier::get().'&e='.urlencode($this->extra);
$javascript=sprintf('try { new Ajax.Autocompleter("%s","%s_choices","fid_card.php?%s",'.
'{paramName:"FID",minChars:1,indicator:null,'.

5
include/class_iconcerned.php
View file

@ -34,14 +34,13 @@ require_once('class_html_input.php');
if ( $this->readOnly==true) return $this->display();
$td="";$etd="";
$l_sessid=$_REQUEST['PHPSESSID'];
$r=sprintf("$td
<INPUT TYPE=\"button\" onClick=SearchJrn('%s',".dossier::id().",'%s',%s,'%s') value=\"?\">
<INPUT TYPE=\"button\" onClick=SearchJrn(".dossier::id().",'%s',%s,'%s') value=\"?\">
$etd $td
<INPUT TYPE=\"text\" style=\"color:black;background:lightyellow;border:solid 1px grey;\" NAME=\"%s\" ID=\"%s\" VALUE=\"%s\" SIZE=\"8\" readonly>
$etd",
$l_sessid,
$this->name,
$this->extra,
$this->extra2,

4
include/class_iposte.php
View file

@ -38,7 +38,6 @@ require_once('function_javascript.php');
* - 3 the button and the text are in the table (TD)
*\note we use the set_attribute for giving parameter to search_account
* attribute are
* - phpsessid
* - gDossier
* - jrn if set there is a filter on a ledger, in that case, contains the jrn_id (0 for no filter)
* - ipopup ipopup to open
@ -75,7 +74,6 @@ $text->name('field');
$text->value=$p_res[$i]['pvalue'];
$text->set_attribute('ipopup','ipop_account');
$text->set_attribute('gDossier',Dossier::id());
$text->set_attribute('phpsessid',$_REQUEST['phpsessid']);
$text->set_attribute('jrn',0);
$text->set_attribute('account','field');
@ -127,7 +125,7 @@ class IPoste extends HtmlInput
if ( $this->readOnly==true) return $this->display();
//--
if ( ! isset($this->ctrl) ) $this->ctrl='none';
$l_sessid=$_REQUEST['PHPSESSID'];
if ( ! isset($this->javascript)) $this->javascript="";
/* create the text */

6
include/class_itva.php
View file

@ -40,10 +40,10 @@ require_once('class_html_input.php');
$this->value,
$this->label,
$this->name);
$l_sessid=$_REQUEST['PHPSESSID'];
$r.=sprintf("<input type=\"button\" value=\"Tva\"
onClick=\"ShowTva('%s',%d,'%s');\"></TD>",
$l_sessid,dossier::id(),$this->name);
onClick=\"ShowTva(%d,'%s');\"></TD>",
dossier::id(),$this->name);
if ( $this->table == 1 ) $r=td($r);
return $r;

3
include/class_itva_popup.php
View file

@ -34,9 +34,8 @@ require_once('class_ispan.php');
echo $a->input();
$tva=new ITva_Popup("tva1");
$tva->with_button(true);
// You must add the attributes gDossier, popup and phpsessid
// You must add the attributes gDossier, popup
$tva->set_attribute('popup','popup_tva');
$tva->set_attribute('phpsessid',$_REQUEST['PHPSESSID']);
$tva->set_attribute('gDossier',dossier::id());
// We can add a label for the code

1
include/class_lettering.php
View file

@ -83,7 +83,6 @@ class Lettering
*@brief save from array
*@param $p_array
@code
'phpsessid' => string 'a2c261a2f48b0045a8c28276afd31f5c' (length=32)
'gDossier' => string '13' (length=2)
'letter_j_id' =>
array

1
include/client.inc.php
View file

@ -38,7 +38,6 @@ echo js_include('controls.js');
echo js_include('dragdrop.js');
echo JS_CARD;
echo JS_AJAX_FICHE;
echo HtmlInput::phpsessid();
echo ICard::ipopup('ipop_newcard');
$ip_cat=new IPopup('ipop_cat');
$ip_cat->title=_('Ajout d\'une catégorie');

1
include/client_card.inc.php
View file

@ -104,7 +104,6 @@ if ( $ss_action == 'op') {
if ( $ss_action == 'cn') {
echo '<div class="content">';
echo dossier::hidden();
echo HtmlInput::phpsessid();
$f=new fiche($cn,$_REQUEST['f_id']);
$contact=new Contact($cn);
$contact->company=$f->get_quick_code();

4
include/constant.php
View file

@ -163,9 +163,9 @@ define ("JS_COMPUTE_ODS",
"<SCRIPT language=\"javascript\" src=\"js/compute.js\"> </SCRIPT>");
define ("JS_SHOW_TVA","<SCRIPT language=\"javascript\">
function ShowTva(p_sessid,p_dossier,ctl)
function ShowTva(p_dossier,ctl)
{
var win=window.open('show_tva.php?ctl='+ctl+'&PHPSESSID='+p_sessid+'&gDossier='+p_dossier,'Montre','scrollbar,toolbar=no,width=300,height=300,resizable=yes');
var win=window.open('show_tva.php?ctl='+ctl+'&gDossier='+p_dossier,'Montre','scrollbar,toolbar=no,width=300,height=300,resizable=yes');
}
function GetIt(ctl,tva_id) {
self.opener.SetValue(ctl,tva_id)

2
include/extension.inc.php
View file

@ -43,7 +43,7 @@ echo js_include('extension.js');
$ipopup=new IPopup('dtext');
$ipopup->value='';
$ipopup->title=_('Détail extension');
echo HtmlInput::hidden('popup','dtext').dossier::hidden().HtmlInput::phpsessid();
echo HtmlInput::hidden('popup','dtext').dossier::hidden();
echo $ipopup->input();
echo '<div class="content">';

18
include/fiche.inc.php
View file

@ -44,12 +44,6 @@ $str_dossier=dossier::get();
echo js_include('accounting_item.js');
echo JS_AJAX_FICHE;
if ( !isset($sessid))
{
$sessid=$_REQUEST["PHPSESSID"];
}
$cn=new Database($gDossier);
echo_debug(__FILE__,__LINE__,"Connected");
// Security check
@ -62,7 +56,7 @@ if ($write == 0 ){
function ShowRecherche() {
echo '<DIV class="u_redcontent">';
echo '<form method="GET" action="?">';
echo dossier::hidden().HtmlInput::phpsessid();
echo dossier::hidden();
$w=new IText();
$search_text=(isset($_REQUEST['search_text']))?$_REQUEST['search_text']:"";
$h=new IHidden();
@ -96,7 +90,7 @@ function ShowFicheDefInput($p_fiche_def)
$r.= '<H2 class="info">'.h($p_fiche_def->label).'</H2>';
/* show the values label class_base and create account */
$r.='<form method="post">';
$r.=dossier::hidden().HtmlInput::phpsessid();
$r.=dossier::hidden();
$r.=HtmlInput::hidden("fd_id",$p_fiche_def->id);
$r.=HtmlInput::hidden("p_action","fiche");
$r.= $p_fiche_def->input_base();
@ -105,7 +99,7 @@ function ShowFicheDefInput($p_fiche_def)
$r.='</form>';
/* attributes */
$r.= '<FORM action="?p_action=fiche" method="POST">';
$r.=dossier::hidden().HtmlInput::phpsessid();
$r.=dossier::hidden();
$r.=HtmlInput::hidden("fd_id",$p_fiche_def->id);
$r.= $p_fiche_def->DisplayAttribut("remove");
$r.= HtmlInput::submit('add_line',_('Ajoutez cet élément'));
@ -278,7 +272,7 @@ if ( isset ( $_GET["action"]) ) {
}
if ( $write != 0 )
echo '<form method="post" action="?p_action=fiche&action=vue&fiche='.$_GET['fiche'].$str.'">';
echo dossier::hidden().HtmlInput::phpsessid();
echo dossier::hidden();
echo $fiche->Display($t);
echo HtmlInput::hidden("f_id",$_GET['fiche_id']);
if ( $write != 0 ) {
@ -306,7 +300,7 @@ if ( isset ( $_GET["action"]) ) {
echo '<form method="post">';
$oFiche_Def=new fiche_def($cn);
echo HtmlInput::hidden("p_action","fiche");
echo dossier::hidden().HtmlInput::phpsessid();
echo dossier::hidden();
echo $oFiche_Def->input(); // CreateCategory($cn,$search);
echo HtmlInput::submit("add_modele" ,"Sauve");
@ -376,7 +370,7 @@ if ( isset ($_POST["fiche"]) && isset ($_POST["add"] ) ) {
$fiche=new fiche($cn,0);
echo '<form method="post" action="'.$url.'&fiche='.$_POST['fiche'].'">';
echo dossier::hidden().HtmlInput::phpsessid();
echo dossier::hidden();
echo $fiche->blank($_POST['fiche']);
echo HtmlInput::submit("add_fiche","Ajout");
echo HtmlInput::button_anchor(_('Annuler'),$url.'&fiche='.$_POST['fiche'].'&'.$str_dossier);

16
include/forecast.inc.php
View file

@ -185,15 +185,15 @@ if ( $sa == 'new' || isset ($_POST['step3'])) {
$aForecast=Forecast::load_all($cn);
$menu=array();
$get_dossier=dossier::get();
$phpsessid="PHPSESSID=".$_REQUEST['PHPSESSID'];
for ($i = 0;$i<count($aForecast);$i++){
$href="?p_action=prev&sa=vw&".$get_dossier."&".$phpsessid.'&f_id='.$aForecast[$i]['f_id'];
$href="?p_action=prev&sa=vw&".$get_dossier.'&f_id='.$aForecast[$i]['f_id'];
$name=h($aForecast[$i]['f_name']);
$menu[]=array($href,$name,$name,$aForecast[$i]['f_id']);
}
$href="?p_action=prev&sa=new&".$get_dossier.'&'.$phpsessid;
$href="?p_action=prev&sa=new&".$get_dossier;
$menu[]=array($href,_("Ajout prévision"),_("Ajout d'une prévision"),0);
$def=(isset($_REQUEST['f_id']))?$_REQUEST['f_id']:-1;
echo '<div class="lmenu">';
@ -231,7 +231,7 @@ if ( $sa == 'new') {
echo $search_card->input();
echo '<form method="post" action="?">';
echo dossier::hidden().HtmlInput::phpsessid();
echo dossier::hidden();
echo HtmlInput::hidden('sa','new');
echo HtmlInput::hidden('p_action','prev');
echo HtmlInput::hidden('f_id',$id);
@ -247,7 +247,7 @@ if ( $sa == 'new') {
echo '<div class="content">';
/* display a blank form for name and category */
echo '<form method="post" action="?">';
echo dossier::hidden().HtmlInput::phpsessid();
echo dossier::hidden();
echo HtmlInput::hidden('sa','new');
echo HtmlInput::hidden('p_action','prev');
echo $anc->form_cat();
@ -267,7 +267,7 @@ if ( isset($_GET['mod_cat'])){
echo '<div class="content">';
/* display a blank form for name and category */
echo '<form method="post" action="?">';
echo dossier::hidden().HtmlInput::phpsessid();
echo dossier::hidden();
echo HtmlInput::hidden('sa','mod');
echo HtmlInput::hidden('p_action','prev');
echo $anc->form_cat();
@ -304,7 +304,7 @@ if (isset($_GET['mod_item'])){
echo $search_card->input();
echo '<form method="post" action="?">';
echo dossier::hidden().HtmlInput::phpsessid();
echo dossier::hidden();
echo HtmlInput::hidden('sa','new');
echo HtmlInput::hidden('p_action','prev');
echo HtmlInput::hidden('f_id',$_GET['f_id']);
@ -325,7 +325,7 @@ if ( isset($_REQUEST['f_id']) && $sa=="vw") {
echo $forecast->display();
echo '<div class="noprint">';
echo '<form method="get">';
echo dossier::hidden().HtmlInput::phpsessid();
echo dossier::hidden();
echo HtmlInput::hidden('f_id',$_REQUEST['f_id']);
echo HtmlInput::submit('mod_cat',_('Modifier nom ou catégories'));
echo HtmlInput::submit('mod_item',_('Modifier éléments'));

10
include/import_inc.php
View file

@ -144,12 +144,10 @@ function ShowBox($p_val,$counter,$p_cn,$p_form='form'){
echo "<td>n° compte : ".$p_val['num_compte']."</td>";
if ( $p_form == 'form') {
$str_update=sprintf("import_update('%s','%s','%s');",
$_REQUEST['PHPSESSID'],
$str_update=sprintf("import_update('%s','%s');",
dossier::id(),
$counter);
$str_remove=sprintf("import_remove('%s','%s','%s');",
$_REQUEST['PHPSESSID'],
$str_remove=sprintf("import_remove('%s','%s');",
dossier::id(),
$counter);
@ -159,8 +157,7 @@ function ShowBox($p_val,$counter,$p_cn,$p_form='form'){
'</td><tr/>';
}
if ($p_form == 'remove' ) {
$str_notconfi=sprintf("import_not_confirmed('%s','%s','%s');",
$_REQUEST['PHPSESSID'],
$str_notconfi=sprintf("import_not_confirmed('%s','%s');",
dossier::id(),
$counter);
@ -177,7 +174,6 @@ function ShowBox($p_val,$counter,$p_cn,$p_form='form'){
function VerifImport($p_cn){
$sql = "select * from import_tmp where status='n' ".
" order by date_exec,code";
echo HtmlInput::phpsessid();
$Res=$p_cn->exec_sql($sql);
$Num=Database::num_row($Res);
echo $Num._(" opérations à complèter")."<br/><br/>";

1
include/impress_fiche.inc.php
View file

@ -113,7 +113,6 @@ $export_pdf.=HtmlInput::hidden('start',$_GET['start']);
$export_pdf.=HtmlInput::hidden('end',$_GET['end']);
$export_pdf.=HtmlInput::hidden('histo',$_GET['histo']);
$export_pdf.=dossier::hidden();
$export_pdf.=HtmlInput::phpsessid();
$export_pdf.=HtmlInput::submit('pdf','Export en PDF');
$export_pdf.='</FORM>';
echo $export_pdf;

2
include/impress_gl_comptes.inc.php
View file

@ -43,7 +43,7 @@ echo '<div class="content">';
echo '<FORM action="?" METHOD="GET">';
echo HtmlInput::hidden('p_action','impress');
echo HtmlInput::hidden('type','gl_comptes');
echo dossier::hidden();echo HtmlInput::phpsessid();
echo dossier::hidden();
echo '<TABLE><TR>';
$cn=new Database(dossier::id());

2
include/impress_poste.inc.php
View file

@ -60,7 +60,7 @@ echo '<div class="content">';
echo '<FORM action="?" METHOD="GET">';
echo HtmlInput::hidden('p_action','impress');
echo HtmlInput::hidden('type','poste');
echo dossier::hidden();echo HtmlInput::phpsessid();
echo dossier::hidden();
echo '<TABLE><TR>';
$span=new ISpan();

27
include/jrn.php
View file

@ -165,11 +165,10 @@ function ShowOperationExpert($p_cn,$p_jr_id,$p_mode=1)
if ( $content['jr_pj_name'] != "")
$r.='<TD>Effacer PJ <INPUT TYPE="CHECKBOX" name="to_remove" ></TD>';
}
$r.="<TD>".sprintf('<A class="detail" HREF="show_pj.php?jrn=%s&jr_grpt_id=%s&%s&PHPSESSID=%s">%s</A>',
$r.="<TD>".sprintf('<A class="detail" HREF="show_pj.php?jrn=%s&jr_grpt_id=%s">%s</A>',
$content['jr_id'],
$content['jr_grpt_id'],
$str_dossier,
$_REQUEST['PHPSESSID'],
$content['jr_pj_name']
)."</TD>";
@ -210,7 +209,7 @@ function ShowOperationExpert($p_cn,$p_jr_id,$p_mode=1)
$rec=new Acc_Reconciliation($p_cn);
$rec->set_jr_id($content['jr_id']);
$a=$rec->get();
$sessid=$_REQUEST["PHPSESSID"];
if ( $a != null ) {
$r.="<h2 class=\"info2\">Operation concernée</h2> <br>";
@ -218,18 +217,17 @@ function ShowOperationExpert($p_cn,$p_jr_id,$p_mode=1)
foreach ($a as $key => $element) {
$operation=new Acc_operation($p_cn);
$operation->jr_id=$element;
$r.=sprintf ('%s <INPUT class="button" TYPE="BUTTON" VALUE="Détail" onClick="modifyOperation(\'%s\',\'%s\',%d)">',
$r.=sprintf ('%s <INPUT class="button" TYPE="BUTTON" VALUE="Détail" onClick="modifyOperation(\'%s\',%d)">',
$operation->get_internal($p_cn,$element),
$element,
$sessid,
$gDossier);
$r.=sprintf('<INPUT class="button" TYPE="button" value="Efface" onClick="dropLink(\'%s\',\'%s\',\'%s\',%d)"><BR>',
$content['jr_id'],$element,$sessid,$gDossier);
$r.=sprintf('<INPUT class="button" TYPE="button" value="Efface" onClick="dropLink(\'%s\',\'%s\',%d)"><BR>',
$content['jr_id'],$element,$gDossier);
}//for
$r.= "</div>";
}// if ( $a != null )
$search='<INPUT TYPE="BUTTON" class="button" VALUE="Cherche" OnClick="SearchJrn(\''.$sessid."',".$gDossier.",'rapt','".$content['jr_montant']."')\">";
$search='<INPUT TYPE="BUTTON" class="button" VALUE="Cherche" OnClick="SearchJrn('.$gDossier.",'rapt','".$content['jr_montant']."')\">";
$r.= 'Autre rapprochement :
<INPUT TYPE="TEXT" id="rapt" name="rapt" value="">'.$search;
@ -564,10 +562,9 @@ function ShowOperationUser($p_cn,$p_jr_id,$p_mode=1)
//doc
if ( $p_mode ==1 && $content['jr_pj_name'] != "")
$r.='<tr><TD>Effacer Pj <INPUT TYPE="CHECKBOX" name="to_remove" ></TD>';
$r.="<TD>".sprintf('<A class="detail" HREF="show_pj.php?jrn=%s&jr_grpt_id=%s&'.$str_dossier.'&PHPSESSID=%s">%s</A>',
$r.="<TD>".sprintf('<A class="detail" HREF="show_pj.php?jrn=%s&jr_grpt_id=%s&'.$str_dossier.'">%s</A>',
$content['jr_id'],
$content['jr_grpt_id'],
$_REQUEST['PHPSESSID'],
$content['jr_pj_name'])."</TD>";
$r.="</TR></TABLE>";
@ -606,7 +603,6 @@ function ShowOperationUser($p_cn,$p_jr_id,$p_mode=1)
$a=$rec->get();
$sessid=$_REQUEST["PHPSESSID"];
if ( $a != null ) {
$r.="<h2 class=\"info2\">Operation concernée</h2> <br>";
@ -615,18 +611,17 @@ function ShowOperationUser($p_cn,$p_jr_id,$p_mode=1)
foreach ($a as $key => $element) {
$operation=new Acc_operation($p_cn);
$operation->jr_id=$element;
$r.=sprintf ('%s <INPUT TYPE="BUTTON" class="button" VALUE="Détail" onClick="modifyOperation(\'%s\',\'%s\',%d)">',
$r.=sprintf ('%s <INPUT TYPE="BUTTON" class="button" VALUE="Détail" onClick="modifyOperation(\'%s\',%d)">',
$operation->get_internal(),
$element,
$sessid,
$gDossier);
$r.=sprintf('<INPUT TYPE="button" class="button" value="Efface" onClick="dropLink(\'%s\',\'%s\',\'%s\',%d)"><BR>',
$content['jr_id'],$element,$sessid,$gDossier);
$r.=sprintf('<INPUT TYPE="button" class="button" value="Efface" onClick="dropLink(\'%s\',\'%s\',%d)"><BR>',
$content['jr_id'],$element,$gDossier);
}//for
$r.= "</div>";
}// if ( $a != null )
$search='<INPUT TYPE="BUTTON" class="button" VALUE="Cherche" OnClick="SearchJrn(\''.$sessid."',".$gDossier.",'rapt','".$content['jr_montant']."')\">";
$search='<INPUT TYPE="BUTTON" class="button" VALUE="Cherche" OnClick="SearchJrn('.$gDossier.",'rapt','".$content['jr_montant']."')\">";
$r.= 'Autre rapprochement :
<INPUT TYPE="TEXT" id="rapt" name="rapt" value="">'.$search;

2
include/lettering.account.inc.php
View file

@ -38,7 +38,6 @@ echo '<div class="content">';
echo '<div id="search">';
echo '<FORM METHOD="GET">';
echo dossier::hidden();
echo HtmlInput::phpsessid();
echo HtmlInput::hidden('p_action','let');
echo HtmlInput::hidden('sa','poste');
echo '<table width="50%">';
@ -46,7 +45,6 @@ echo '<table width="50%">';
$poste=new IPoste();
$poste->name="acc";
$poste->table=1;
$poste->set_attribute('phpsessid',$_REQUEST['PHPSESSID']);
$poste->set_attribute('jrn',0);
$poste->set_attribute('gDossier',dossier::id());
$poste->set_attribute('ipopup','ipop_account');

1
include/lettering.card.inc.php
View file

@ -44,7 +44,6 @@ echo '<div class="content">';
echo '<div id="search">';
echo '<FORM METHOD="GET">';
echo dossier::hidden();
echo HtmlInput::phpsessid();
echo HtmlInput::hidden('p_action','let');
echo HtmlInput::hidden('sa','qc');
echo HtmlInput::hidden('p_jrn','0');

1
include/lettering.gestion.inc.php
View file

@ -4,7 +4,6 @@ echo '<div class="content">';
echo '<div id="search">';
echo '<FORM METHOD="GET">';
echo dossier::hidden();
echo HtmlInput::phpsessid();
echo HtmlInput::hidden('p_action',$_REQUEST['p_action']);
echo HtmlInput::hidden('sb',$_REQUEST['sb']);
echo HtmlInput::hidden('sc',$_REQUEST['sc']);

3
include/param_jrn_add.inc.php
View file

@ -115,7 +115,6 @@ echo '<div class="lmenu">';
MenuJrn();
echo '</div>';
$sessid=$_REQUEST['PHPSESSID'];
echo '<DIV CLASS="u_redcontent">';
@ -155,7 +154,7 @@ $pj_seq='';
$last_seq=0;
echo '<FORM METHOD="POST">';
echo dossier::hidden().HtmlInput::phpsessid();
echo dossier::hidden();
echo HtmlInput::hidden('p_action','jrn');
echo HtmlInput::hidden('sa','add');
require_once('template/param_jrn.php');

2
include/param_jrn_detail.inc.php
View file

@ -145,7 +145,6 @@ if ( Database::num_row($Res) == 0 ) exit();
$l_line=Database::fetch_array($Res,0);
$sessid = $_REQUEST['PHPSESSID'];
/* Load all the properties of the ledger */
$Ledger=new Acc_Ledger($cn,$_REQUEST['p_jrn']);
@ -184,7 +183,6 @@ $hidden.= HtmlInput::hidden('sa','detail');
$hidden.= dossier::hidden();
$hidden.=HtmlInput::hidden('p_jrn_deb_max_line',10);
$hidden.=HtmlInput::hidden('p_ech_lib','echeance');
$hidden.=HtmlInput::phpsessid();
/* Load the card */
$card=$Ledger->get_fiche_def();

3
include/param_pcmn.inc.php
View file

@ -174,12 +174,11 @@ for ($i=0; $i <$MaxRow; $i++) {
echo $A['pcm_val'];
echo '</td>';
echo "$td";
printf ("<A HREF=\"javascript:PcmnUpdate('%s','%s','%s','%s','%s',%d)\">",
printf ("<A HREF=\"javascript:PcmnUpdate('%s','%s','%s','%s',%d)\">",
$A['pcm_val'],
FormatString($A['pcm_lib']),
$A['pcm_val_parent'],
$A['pcm_type'],
$_REQUEST['PHPSESSID'],
dossier::id());
echo h($A['pcm_lib']);

3
include/report.inc.php
View file

@ -69,7 +69,6 @@ $User->can_request(PARRAP,1);
$cn=new Database($gDossier);
$nocookie='&PHPSESSID='.$_REQUEST['PHPSESSID'];
$rap=new Acc_Report($cn);
if ( isset ($_POST["del_form"]) ) {
@ -154,7 +153,7 @@ if ( isset ($_REQUEST["action"]) ) {
echo HtmlInput::submit("del_form",_("Effacement"));
$w=new IButton();
$w->name="export";
$w->javascript="report_export('".$_REQUEST['PHPSESSID']."','".$gDossier."','".$rap->id."')";
$w->javascript="report_export('".$gDossier."','".$rap->id."')";
$w->label='Export';
echo $w->input();
echo '<span id="export_link"></span>';

2
include/restore.inc.php
View file

@ -34,7 +34,7 @@ if ( isset ($_REQUEST['sa'] )) {
putenv("PGPASSWORD=".phpcompta_password);
putenv("PGUSER=".phpcompta_user);
putenv("PGPORT=".phpcompta_psql_port);
$retour='<hr>'.HtmlInput::button_anchor("Retour","?action=restore&PHPSESSID=".$_REQUEST['PHPSESSID']);
$retour='<hr>'.HtmlInput::button_anchor("Retour","?action=restore");
if ( ! isset($_REQUEST['t'])) {
echo '<div class="content">';
echo ("<span class=\"error\">Vous devez préciser s'il s'agit d'un modèle ou d'un dossier</span>");

4
include/stock_inc.php
View file

@ -202,8 +202,6 @@ $sql="select sg_code,
$r.="<th>Quantité</th>";
$r.="<th>Prix/Cout Unitaire</th>";
$r.="</TR>";
// compute sessid
$l_sessid=$_REQUEST['PHPSESSID'];
for ( $i=0; $i < $M;$i++) {
$l=Database::fetch_array($Res,$i);
@ -228,7 +226,7 @@ $sql="select sg_code,
// jr_internal
$r.="<TD>";
if ( $l['jr_id'] != "")
$r.= "<A class=\"detail\" HREF=\"javascript:modifyOperation('".$l['jr_id']."','".$_REQUEST['PHPSESSID']."',".dossier::id().",0,'S')\" > ".$l['jr_internal']."</A>";
$r.= "<A class=\"detail\" HREF=\"javascript:modifyOperation('".$l['jr_id']."',".dossier::id().",0,'S')\" > ".$l['jr_internal']."</A>";
else
$r.=$l['jr_internal'];

2
include/supplier.inc.php
View file

@ -38,7 +38,6 @@ echo js_include('controls.js');
echo js_include('dragdrop.js');
echo JS_CARD;
echo JS_AJAX_FICHE;
echo HtmlInput::phpsessid();
echo ICard::ipopup('ipop_newcard');
$ip_cat=new IPopup('ipop_cat');
$ip_cat->title=_('Ajout d\'une catégorie');
@ -93,7 +92,6 @@ if ( $low_action == "list" )
<form method="get" action="<?php echo $href; ?>">
<?php
echo dossier::hidden();
echo HtmlInput::phpsessid();
$a=(isset($_GET['query']))?$_GET['query']:"";
printf (_('Recherche').' <input type="text" name="query" value="%s">',
$a);

1
include/supplier_card.inc.php
View file

@ -105,7 +105,6 @@ if ( $ss_action == 'op') {
if ( $ss_action == 'cn') {
echo '<div class="content">';
echo dossier::hidden();
echo HtmlInput::phpsessid();
$f=new fiche($cn,$_REQUEST['f_id']);
$contact=new Contact($cn);
$contact->company=$f->get_quick_code();

2
include/template/dashboard.php
View file

@ -10,7 +10,6 @@
* Todo list
*/
echo dossier::hidden();
echo HtmlInput::phpsessid();
if ( isset($_REQUEST['save_todo_list'])) {
/* Save the new elt */
$add_todo=new Todo_List($cn);
@ -36,7 +35,6 @@ $wDesc->width=19;
echo _("Date")." ".$wDate->input().'<br>';
echo _("Titre")." ".$wTitle->input().'<br>';
echo _("Description")."<br>".$wDesc->input().'<br>';
echo HtmlInput::hidden('phpsessid',$_REQUEST['PHPSESSID']);
echo dossier::hidden();
echo HtmlInput::hidden('tl_id',0);
echo HtmlInput::submit('save_todo_list',_('Sauve'),'onClick="hide(\'add_todo_list\');show(\'add\');return true;"');

3
include/template/detail-action.php
View file

@ -248,9 +248,8 @@ for ($i=0;$i<sizeof($aAttachedFile);$i++) :
<p>
<A class="mtitle" id="<?php echo "doc".$aAttachedFile[$i]['d_id'];?>" href="<?php echo $aAttachedFile[$i]['link']?>"><?php echo $aAttachedFile[$i]['d_filename'];?>
</A>
<?php $rmDoc=sprintf("javascript:if ( confirm('"._('Voulez-vous effacer le document')." %s')==true ) {remove_document('%s','%s','%s');}",
<?php $rmDoc=sprintf("javascript:if ( confirm('"._('Voulez-vous effacer le document')." %s')==true ) {remove_document('%s','%s');}",
$aAttachedFile[$i]['d_filename'],
$_REQUEST['PHPSESSID'],
dossier::id(),
$aAttachedFile[$i]['d_id']);
?>

9
include/template/letter_all.php
View file

@ -3,7 +3,7 @@ require_once ('class_acc_operation.php');
require_once ('class_acc_reconciliation.php');
$amount_deb=0;$amount_cred=0;
$gDossier=dossier::id();
$l_sessid=$_REQUEST['PHPSESSID'];
if ( count($this->content) == 0 ) :
?>
@ -44,7 +44,6 @@ for ($i=0;$i<count($this->content);$i++):
<?php
$letter=($this->content[$i]['letter']==-1)?"x":$this->content[$i]['letter'];
$js="this.gDossier=".dossier::id().
";this.phpsessid='".$_REQUEST['PHPSESSID']."'".
";this.j_id=".$this->content[$i]['j_id'].
";this.obj_type='".$this->object_type."'".
";dsp_letter(this)";
@ -54,8 +53,8 @@ $js="this.gDossier=".dossier::id().
</td>
<td> <?=$this->content[$i]['j_date_fmt']?> </td>
<?php
$r=sprintf('<A class="detail" style="text-decoration:underline" HREF="javascript:viewOperation(\'%s\',\'%s\',\'%s\')" >%s</A>',
$this->content[$i]['jr_id'], $l_sessid,$gDossier, $this->content[$i]['jr_internal']);
$r=sprintf('<A class="detail" style="text-decoration:underline" HREF="javascript:viewOperation(\'%s\',\'%s\')" >%s</A>',
$this->content[$i]['jr_id'], $gDossier, $this->content[$i]['jr_internal']);
?>
<td> <?=$r?> </td>
<td> <?=h($this->content[$i]['jr_comment'])?> </td>
@ -74,7 +73,7 @@ $r=sprintf('<A class="detail" style="text-decoration:underline" HREF="javascript
$operation->jr_id=$element;
$l_amount=$this->db->get_value("select jr_montant from jrn ".
" where jr_id=$element");
echo "<A class=\"detail\" HREF=\"javascript:viewOperation('".$element."','".$l_sessid."',".$gDossier.")\" > ".$operation->get_internal()." [ $l_amount &euro; ]</A>";
echo "<A class=\"detail\" HREF=\"javascript:viewOperation('".$element."',".$gDossier.")\" > ".$operation->get_internal()." [ $l_amount &euro; ]</A>";
}//for
}// if ( $a != null ) {
// compute amount

7
include/template/letter_prop.php
View file

@ -3,7 +3,6 @@ require_once ('class_acc_operation.php');
require_once ('class_acc_reconciliation.php');
$gDossier=dossier::id();
$l_sessid=$_REQUEST['PHPSESSID'];
if ( count($this->content) == 0 ) :
?>
@ -65,8 +64,8 @@ $letter=($this->content[$i]['letter']==-1)?" ":$this->content[$i]['letter'];
</td>
<td> <?=$this->content[$i]['j_date_fmt']?> </td>
<?php
$r=sprintf('<A class="detail" style="text-decoration:underline" HREF="javascript:viewOperation(\'%s\',\'%s\',\'%s\')" >%s</A>',
$this->content[$i]['jr_id'], $l_sessid,$gDossier, $this->content[$i]['jr_internal']);
$r=sprintf('<A class="detail" style="text-decoration:underline" HREF="javascript:viewOperation(\'%s\',\'%s\')" >%s</A>',
$this->content[$i]['jr_id'], $gDossier, $this->content[$i]['jr_internal']);
?>
<td> <?=$r?> </td>
<td> <?=$this->content[$i]['jr_comment']?> </td>
@ -85,7 +84,7 @@ $r=sprintf('<A class="detail" style="text-decoration:underline" HREF="javascrip
$operation->jr_id=$element;
$l_amount=$this->db->get_value("select jr_montant from jrn ".
" where jr_id=$element");
echo "<A class=\"detail\" HREF=\"javascript:viewOperation('".$element."','".$l_sessid."',".$gDossier.")\" > ".$operation->get_internal()." [ $l_amount &euro; ]</A>";
echo "<A class=\"detail\" HREF=\"javascript:viewOperation('".$element."',".$gDossier.")\" > ".$operation->get_internal()." [ $l_amount &euro; ]</A>";
}//for
}// if ( $a != null ) {

2
include/template/list_category_document.php
View file

@ -29,7 +29,7 @@ endfor;
</table>
<?
echo HtmlInput::phpsessid().dossier::hidden();
echo dossier::hidden();
echo HtmlInput::hidden('p_action',$_REQUEST['p_action']);
echo HtmlInput::hidden('sa',$_REQUEST['sa']);
?>

6
include/user_menu.php
View file

@ -329,9 +329,7 @@ function MenuAdmin()
*/
function ShowMenuParam($p_action="")
{
// The phpsessid is set manually to avoid problem when the server is
// misconfigured and the cookies are not sent (or accepted)
$s=dossier::get().'&PHPSESSID='.$_REQUEST['PHPSESSID'];
$s=dossier::get();
$sub_menu=ShowItem(array(
array('parametre.php?p_action=company&'.$s,_('Sociétés'),_('Parametre societe'),1),
@ -474,7 +472,7 @@ function menu_tool($p_from) {
}
$r.='<td class="mtitle2">';
$r.= '<A class="cell" HREF="javascript:openRecherche(\''.$_REQUEST['PHPSESSID'].'\','.$gDossier.')">'.
$r.= '<A class="cell" HREF="javascript:openRecherche('.$gDossier.')">'.
_('Recherche').'</a></td>';
$r.='</tr>';