remove direct access to $_GET

This commit is contained in:
sparkyx 2026-02-27 14:42:07 +01:00
parent ce691ca8e5
commit 59c3ffdf0e

View file

@ -88,7 +88,6 @@ $html=var_export($_REQUEST,true);
// For storing extra information , example the HTML elt id to update
// after creating
$extra="";
$http=new \HttpInput();
switch($op2)
{
case 'attribute':
@ -717,7 +716,7 @@ case 'upc':
}
else
{
if ($cn->get_value('select count(*) from fiche where f_id=$1',array($_GET['f_id'])) == '0' )
if ($cn->get_value('select count(*) from fiche where f_id=$1',array($http->get('f_id'))) == '0' )
{
$html.=alert(_('Fiche non valide'),true);
}
@ -726,7 +725,7 @@ case 'upc':
{
$html=HtmlInput::title_box(_('Détail fiche (sauvée)'),$ctl);
$f=new Fiche($cn,$_GET['f_id']);
$f=new Fiche($cn,$http->get('f_id'));
ob_start();
$f->update($_GET);
$html.=ob_get_contents();