admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security : fix potential problem for SQL injection

Browse source
This commit is contained in:
Dany De Bontridder 2017-02-15 22:06:10 +01:00
parent 1207d65ac0
commit 48f0c1f885
8 changed files with 39 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

2
include/export/export_ledger_csv.php
View file

@ -211,7 +211,7 @@ if ($get_option == 1)
// Get the jrn type
if ( $line['jrn_def_type'] == 'FIN' ) {
$positive = $cn->get_value("select qf_amount from quant_fin ".
" where jr_id=".$line['jr_id']);
" where jr_id=$1",array($line['jr_id']));
$export->add($positive,"number");
$export->add("");