admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix security problem when seeing object BALANCE

Browse source
This commit is contained in:
Dany De Bontridder 2010-07-03 14:32:33 +00:00
parent 9680338daa
commit 3e8ca51e90
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
include/class_acc_balance.php
View file

@ -71,6 +71,8 @@ class Acc_Balance {
if ( strlen(trim($this->to_poste)) != 0 && $this->to_poste!=-1 ) {
$to_poste=" $and j_poste::text <= '".$this->to_poste."'"; $and=" and ";
}
$user=new User($this->db);
$filter_sql=$user->get_ledger_sql('ALL',3);
// build query
$sql="select j_poste,sum(deb) as sum_deb, sum(cred) as sum_cred from
@ -79,9 +81,11 @@ class Acc_Balance {
case when j_debit='f' then j_montant else 0 end as cred
from jrnx join tmp_pcmn on j_poste=pcm_val
left join parm_periode on j_tech_per = p_id
join jrn_def on (j_jrn_def=jrn_def_id)
where
$jrn $from_poste $to_poste
$and
$and $filter_sql
and
$per_sql ) as m group by j_poste order by j_poste::text";
$cn=clone $this->db;
$Res=$this->db->exec_sql($sql);