From 2c4f014a145d02715e99acc24e96ed9cfdb4f32c Mon Sep 17 00:00:00 2001
From: sparkyx <danydb@noalyss.eu>
Date: Tue, 28 May 2024 23:23:21 +0200
Subject: [PATCH] Security : forbid direct access to $_GET

---
 include/export/export_fiche_detail_pdf.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/export/export_fiche_detail_pdf.php b/include/export/export_fiche_detail_pdf.php
index 4f623caf5..bb5709546 100644
--- a/include/export/export_fiche_detail_pdf.php
+++ b/include/export/export_fiche_detail_pdf.php
@@ -40,7 +40,7 @@ $cn=Dossier::connect();
 
 $ret="";
 $pdf= new PDF($cn);
-$pdf->setDossierInfo("  Periode : ".$from_periode." - ".$to_periode);
+$pdf->setDossierInfo(" Periode : ".$from_periode." - ".$to_periode);
 $pdf->AliasNbPages();
 $pdf->AddPage();
 $pdf->SetAuthor('NOALYSS');
@@ -50,7 +50,7 @@ $pdf->setTitle(_("Détail fiche"),true);
 $Fiche=new Fiche($cn,$f_id);
 $operation=new Acc_Operation($cn);
 
-list($array,$tot_deb,$tot_cred)=$Fiche->get_row_date($from_periode,$to_periode,$_GET['ople']);
+list($array,$tot_deb,$tot_cred)=$Fiche->get_row_date($from_periode,$to_periode,$http->get('ople'));
 // don't print empty account
 if ( count($array) == 0 )
 {