admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security : SQL use directly $_SESSION

Browse source
This commit is contained in:
Dany De Bontridder 2017-10-08 14:39:44 +02:00
parent 83576a08ad
commit 4fed33db33
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
include/class/acc_ledger.class.php
View file

@ -2934,7 +2934,7 @@ class Acc_Ledger extends jrn_def_sql
{
$fil_sec = $and . " jr_def_id in ( select uj_jrn_id " .
" from user_sec_jrn where " .
" uj_login='" . $_SESSION['g_user'] . "'" .
" uj_login='" .sql_string($_SESSION['g_user']) . "'" .
" and uj_priv in ('R','W'))";
}
$where = $fil_ledger . $fil_amount . $fil_date . $fil_desc . $fil_sec . $fil_amount . $fil_qcode . $fil_paid . $fil_account.$fil_date_paid;