admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Code : not direct access to $_GET

Browse source 
Bug : javascript didn't work
This commit is contained in:
Dany De Bontridder 2020-06-10 10:45:43 +02:00
parent 09659f756d
commit 376aab00b2
1 changed files with 11 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

15
html/recherche.php
View file

@ -74,7 +74,7 @@ window.onload=function ()
{
create_anchor_up();
init_scroll();
sorttable.init
sorttable.init();
}
</script>
<?php
@ -123,10 +123,17 @@ if ( isset ($_GET['viewsearch']))
/*
* Export to csv
*/
$r=HtmlInput::get_to_hidden(array('l','date_start','date_end','desc','amount_min','amount_max','qcode','accounting','unpaid','gDossier','ledger_type'));
$r=HtmlInput::get_to_hidden(array('l','date_start','date_end','desc','amount_min','amount_max',
'qcode','accounting','unpaid','gDossier','ledger_type'));
if (isset($_GET['r_jrn'])) {
foreach ($_GET['r_jrn'] as $k=>$v)
$r.=HtmlInput::hidden('r_jrn['.$k.']',$v);
$http=new HttpInput();
$a_rjrn=$http->get("r_jrn","array");
foreach ($a_rjrn as $k=>$v) {
// Protect : check that $k and $v are numeric
if (isNumber($k)&&isNumber($v)) {
$r.=HtmlInput::hidden('r_jrn['.$k.']',$v);
}
}
}
echo '<form action="export.php" method="get">';
echo $r;