admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security remove all $user->can_request except for extension

Browse source
This commit is contained in:
Dany De Bontridder 2011-11-08 19:45:07 +00:00
parent ecafd644a3
commit 4cee45d624
23 changed files with 16 additions and 129 deletions
Download patch file Download diff file Expand all files Collapse all files

5
include/export_gl_pdf.php
View file

@ -41,13 +41,12 @@ $cn=new Database($gDossier);
$User=new User($cn);
$User->Check();
$User->check_dossier($gDossier);
$User->can_request(IMPBIL,0);
$sql="select pcm_val from tmp_pcmn ";
extract($_GET);
$cond_poste="";
if ($from_poste != '')
if ($from_poste != '')
{
$cond_poste = ' where ';
$cond_poste .=' pcm_val >= upper (\''.Database::escape_string($from_poste).'\')';
@ -55,7 +54,7 @@ if ($from_poste != '')
if ( $to_poste != '')
{
if ( $cond_poste == '')
if ( $cond_poste == '')
{
$cond_poste = ' where pcm_val <= upper (\''.Database::escape_string($to_poste).'\')';
}