admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Protect againt cross scripting attack

Browse source 
correct bug with predef operation in misc ledger
correct bug when modifying tva
correct bug add a parent account = 0
correct bug budget
improve warning message to request patch for database
This commit is contained in:
Dany De Bontridder 2008-12-19 21:34:15 +00:00
parent 1ac5401bf1
commit 6abd5c6e9e
43 changed files with 274 additions and 197 deletions
Download patch file Download diff file Expand all files Collapse all files

8
include/impress_poste.inc.php
View file

@ -145,12 +145,12 @@ if ( isset( $_REQUEST['bt_html'] ) ) {
if ( empty($Poste->row)) exit();
$Poste->load();
echo '<table "width=70%">';
echo '<tr><td class="mtitle" colspan="5"><h2 class="info">'. $_GET['poste_id'].' '.$Poste->label.'</h2></td></tr>';
echo '<tr><td class="mtitle" colspan="5"><h2 class="info">'. $_GET['poste_id'].' '.h($Poste->label).'</h2></td></tr>';
foreach ($Poste->row as $a) {
$detail=$a;
echo '<tr><td class="mtitle" colspan="5">'.$detail['j_date'].' '.$detail['jr_internal'].$detail['description'].'</td></tr>';
echo '<tr><td class="mtitle" colspan="5">'.$detail['j_date'].' '.$detail['jr_internal'].h($detail['description']).'</td></tr>';
$op=new Acc_Operation($cn);
$op->jr_id=$a['jr_id'];
@ -216,13 +216,13 @@ if ( isset( $_REQUEST['bt_html'] ) ) {
$Poste->load();
$Poste->get_row( $_GET['from_periode'], $_GET['to_periode']);
if ( empty($Poste->row)) continue;
echo '<tr><td class="mtitle" colspan="5"><h2 class="info">'. $poste_id['pcm_val'].' '.$Poste->label.'</h2></td></tr>';
echo '<tr><td class="mtitle" colspan="5"><h2 class="info">'. $poste_id['pcm_val'].' '.h($Poste->label).'</h2></td></tr>';
$detail=$Poste->row[0];
foreach ($Poste->row as $a) {
echo '<tr><td class="mtitle" colspan="5">'. $detail['j_date'].' '.$detail['jr_internal'].$detail['description'].'</td></tr>';
echo '<tr><td class="mtitle" colspan="5">'. $detail['j_date'].' '.$detail['jr_internal'].h($detail['description']).'</td></tr>';
$op=new Acc_Operation($cn);
$op->poste=$poste_id['pcm_val'];