Task #0000877: Renforcement protection

html/admin_repo.php

@@ -45,7 +45,7 @@ echo '<div class="topmenu">';
 
 echo MenuAdmin()."</div>";
 
-
+define('ALLOWED',true);
 
 
 ?>

html/ajax.php

@@ -7,6 +7,7 @@
  *  - gDossier
  *  - plugin_code
  */
+define ('ALLOWED',1);
 require_once '../include/constant.php';
 require_once('class_database.php');
 require_once('class_user.php');

html/ajax_card.php

@@ -54,6 +54,8 @@
  * - ref if we want to refresh the window
  *\see fiche fiche::Save constant.php
  */
+define ('ALLOWED',1);
+
 require_once '../include/constant.php';
 require_once('class_database.php');
 require_once ('class_fiche.php');

html/ajax_history.php

@@ -34,6 +34,7 @@ require_once('class_acc_account.php');
 require_once('class_exercice.php');
 $div=$_REQUEST['div'];
 mb_internal_encoding("UTF-8");
+define ('ALLOWED',1);
 
 /**
  *if $_SESSION['g_user'] is not set : echo a warning

html/ajax_ledger.php

@@ -29,6 +29,7 @@
     - for reconcialiation
     - update of analytic content
 */
+define ('ALLOWED',1);
 require_once '../include/constant.php';
 require_once('class_database.php');
 require_once('class_user.php');

html/ajax_misc.php

@@ -35,6 +35,7 @@
  * dl : display form to modify, add and delete lettering for a given operation
  *
  */
+define ('ALLOWED',1);
 require_once '../include/constant.php';
 require_once('class_database.php');
 require_once ('class_fiche.php');

html/ajax_poste.php

@@ -33,6 +33,7 @@
  *
  *
  */
+define ('ALLOWED',1);
 require_once '../include/constant.php';
 require_once  ("ac_common.php");
 require_once('class_acc_ledger.php');

html/ajax_todo_list.php

@@ -34,6 +34,7 @@
  * - gDossier
  * - i id
  */
+define ('ALLOWED',1);
 require_once '../include/constant.php';
 require_once ('class_dossier.php');
 require_once ('class_todo_list.php');

html/do.php

@@ -20,7 +20,7 @@
 /* $Revision$ */
 
 // Copyright Author Dany De Bontridder ddebontridder@yahoo.fr
-
+define('ALLOWED',1);
 /**\file
  * \brief Main file
  */

html/export.php

@@ -25,6 +25,7 @@
  *   act can be
  *
  */
+define ('ALLOWED',1);
 require_once '../include/constant.php';
 global $g_user,$cn,$g_parameter;
 require_once('class_database.php');

html/test.php

@@ -77,7 +77,8 @@ $array=array(
            array(33,'Ledger : reverse op'),
            array(34,'Reconciliation'),
            array(35,'Bilan'),
-	   array(36,'SQL2Table')
+	   array(36,'SQL2Table'),
+	   array(37,'balance')
        );
 $r='<form method="get">';
 $r.='<select name="test_select" >';
@@ -297,6 +298,9 @@ case 36:
   require_once('class_html_table.php');
   Html_Table::test_me();
   break;
+case 37:
+    require 'class_acc_balance.php';
+    Acc_Balance::test_me();
 }
 
 

include/action.common.inc.php

@@ -29,7 +29,7 @@
  * - $sub_action sa from suivi courrier but sc from Suivi client, fournisseur...
  *
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 $supl_hidden = '';
 if (isset($_REQUEST['sc']))
 	$supl_hidden.=HtmlInput::hidden('sc', $_REQUEST['sc']);

include/action.inc.php

@@ -21,6 +21,7 @@
 /*! \file
  * \brief Page who manage the different actions (meeting, letter)
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_ipopup.php');
 global $g_user;
 $retour=HtmlInput::button_anchor(_('Retour liste'),

include/adm.inc.php

@@ -21,6 +21,7 @@
 /*!\brief include from adm.inc.php and concerned only the customer card and
  * the customer category
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_iselect.php");
 require_once("class_ihidden.php");
 require_once("class_customer.php");

include/ajax_add_menu.php

@@ -25,6 +25,7 @@
  * @file
  * @brief show the form to add a menu
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 $type=$_GET['type'];
 if ( $type=='me')
 {

include/ajax_anc_search.php

@@ -28,6 +28,7 @@
 
 // parameter are gDossier , c1 : the control id to update,
 // c2 the control id which contains the pa_id
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_itext.php");
 require_once("class_ihidden.php");
 require_once("class_ibutton.php");

include/ajax_auto_anc_card.php

@@ -1,4 +1,5 @@
 <?php 
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once ("class_database.php");
 require_once 'class_user.php';
 $cn=new Database($_GET['gDossier']);

include/ajax_bank_saldo.php

@@ -35,6 +35,7 @@
  *  - l the jrn id
  *  - ctl the ctl where to get the quick_code
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_user.php');
 require_once('class_dossier.php');
 require_once('class_fiche.php');

include/ajax_boxcard_search.php

@@ -26,6 +26,7 @@
  * @brief show result card search
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 $sql="
 	select distinct vw.f_id,vw_name,vw_first_name,vw_description,fd_label,quick_code,tva_num,(select ad_value from fiche_Detail where f_id=pc.f_id and ad_id=5) as poste
 	from vw_fiche_attr as vw

include/ajax_create_menu.php

@@ -1,4 +1,5 @@
 <?php
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once 'class_menu_ref.php';
 $msg="Création";
 $m=new Menu_Ref($cn);

include/ajax_fiche_def_detail.php

@@ -26,6 +26,7 @@
  * @brief show detail of a fiche_def (category of card) + Attribut
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_fiche_def.php');
 require_once 'class_tool_uos.php';
 global $g_user;

include/ajax_get_menu_detail.php

@@ -27,6 +27,7 @@
  *
  */
 // retrieve data
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 $profile=$cn->get_value("select p_id from profile_menu where pm_id=$1",array($pm_id));
 $a_value=$cn->make_array("select me_code,me_code||' '||me_menu||' '||coalesce(me_description,'') from menu_ref",0);
 $ame_code_dep=$cn->make_array("

include/ajax_get_profile.php

@@ -27,6 +27,7 @@
  * @see ajax_misc.php scripts.js profile.inc.php
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once 'class_profile_sql.php';
 require_once 'class_profile_menu.php';
 $profile=new Profile_sql($cn,$p_id);

include/ajax_get_receipt.php

@@ -28,6 +28,7 @@
  * Must return at least tva, htva and tvac
 
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 
 require_once ('constant.php');
 require_once ('class_database.php');

include/ajax_min_row.php

@@ -26,6 +26,7 @@
  * @brief
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_user.php');
 require_once('class_dossier.php');
 extract($_GET);

include/ajax_mod_document.php

@@ -23,6 +23,7 @@
 /*!\file
  * \brief show the detail of a document and let you modify it
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_database.php');
 require_once('class_dossier.php');
 require_once("class_document_modele.php");

include/ajax_mod_menu.php

@@ -1,4 +1,5 @@
 <?php
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once 'class_menu_ref.php';
 $m=new Menu_Ref($cn,$me_code);
 $msg="Modification ".$m->me_code.' '.h($m->me_menu);

include/ajax_mod_periode.php

@@ -20,6 +20,7 @@
 /* $Revision$ */
 
 // Copyright Author Dany De Bontridder ddebontridder@yahoo.fr
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_periode.php');
 
 /**\file

include/ajax_mod_predf_op.php

@@ -24,6 +24,7 @@
 /**\file
  * \brief display a form to change the name of a predefined operation
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 ob_start();
 require_once 'class_pre_operation.php';
 $op=new Pre_Operation($cn,$_GET['id']);

include/ajax_mod_stock_repo.php

@@ -26,6 +26,7 @@
  * @brief show a depot
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once 'class_stock_sql.php';
 $st=new Stock_Sql($_GET['r_id']);
 

include/ajax_plugin_detail.php

@@ -26,6 +26,7 @@
  * @brief add, modify or delete plugin
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 $msg=($new==1)?"Nouvelle extension":"Modification ".$me_menu->value;
 echo HtmlInput::title_box($msg, $ctl);
 ?>

include/ajax_save_predf_op.php

@@ -24,6 +24,7 @@
  * \brief save the new predefined operation 
  * included from ajax_misc
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 if ($g_user->check_module('PREDOP') == 0) exit();
 if ( trim($_POST['opd_name']) != '')
   {

include/ajax_search_action.php

@@ -21,6 +21,7 @@
 /*! \file
  * \brief Search module
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_dossier.php');
 include_once("ac_common.php");
 require_once('class_follow_up.php');

include/ajax_update_payment.php

@@ -26,6 +26,7 @@
  * @brief refresh the area with payment method
  * -l for the ledger
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once 'class_acc_ledger.php';
 $ledger=new Acc_Ledger($cn,$l);
 echo $ledger->input_paid(1);

include/ajax_update_predef.php

@@ -27,6 +27,7 @@
  * - gDossier
  * Must return at least tva, htva and tvac
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 
 require_once ('constant.php');
 require_once ('class_database.php');

include/ajax_view_action.php

@@ -26,6 +26,7 @@
  * @brief show the detail of an action
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once 'class_follow_up.php';
 echo HtmlInput::title_box(_("Détail action"), $div);
 $act = new Follow_Up($cn);

include/ajax_view_mod_stock.php

@@ -27,6 +27,7 @@
  *
  */
 require_once 'class_stock_goods.php';
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 
 $st=new Stock_Goods($cn);
 $array=$cn->get_array("select * from stock_goods where c_id=$1",array($_GET['c_id']));

include/anc_acc_balance.inc.php

@@ -1,5 +1,5 @@
 <?php
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_anc_acc_list.php');
 $tab = new Anc_Acc_List($cn);
 $tab->get_request();

include/anc_acc_table.inc.php

@@ -1,5 +1,5 @@
 <?php
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_anc_table.php');
 $tab = new Anc_Table($cn);
 $tab->get_request();

include/anc_balance_double.inc.php

@@ -1,5 +1,5 @@
 <?php
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once ('class_anc_balance_double.php');
 $bc = new Anc_Balance_Double($cn);
 $bc->get_request();

include/anc_balance_simple.inc.php

@@ -1,5 +1,5 @@
 <?php
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once ('class_anc_balance_simple.php');
 $bs = new Anc_Balance_Simple($cn);
 $bs->get_request();

include/anc_great_ledger.inc.php

@@ -1,5 +1,5 @@
 <?php
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_anc_grandlivre.php');
 $gl = new Anc_GrandLivre($cn);
 $gl->get_request();

include/anc_group.inc.php

@@ -24,6 +24,7 @@
  *\brief manage the group
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_itext.php");
 require_once("class_iselect.php");
 require_once ('class_anc_group.php');

include/anc_group_balance.inc.php

@@ -1,5 +1,5 @@
 <?php
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_anc_group.php');
 $gr = new Anc_Group($cn);
 $gr->get_request();

include/anc_history.inc.php

@@ -5,7 +5,7 @@
  * and open the template in the editor.
  */
 
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once ('class_anc_listing.php');
 $list = new Anc_Listing($cn);
 $list->get_request();

include/anc_od.inc.php

@@ -26,6 +26,7 @@
  * \brief Misc Operation for analytic accountancy
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_ihidden.php");
 require_once("class_iselect.php");
 require_once("class_anc_account.php");

include/anc_pa.inc.php

@@ -25,6 +25,7 @@
  * \brief Plan Analytique
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_anc_plan.php");
 require_once("class_anc_account.php");
 $ret="";

include/audit_log.php

@@ -23,7 +23,7 @@
 /*!\file
  * \brief let you see the list of the connexion
  */
-
+if ( !defined ('ALLOWED')) die('Forbidden');
 ?>
 <DIV class="content" style="width:80%;margin-left:10%">
 <span class="notice">Liste limitée aux 100 dernières connexions</span>

include/balance.inc.php

@@ -24,7 +24,7 @@
  *
  * some variable are already defined ($cn, $g_user ...)
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 include_once ("ac_common.php");
 include_once("class_acc_balance.php");
 require_once("class_iselect.php");

include/balance_card.inc.php

@@ -23,6 +23,7 @@
 /*!\file
  * \brief show the status of a card
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_exercice.php');
 global $g_user;
 echo '<div class="content" style="width:90%;margin-left:5%">';

include/bank.inc.php

@@ -21,6 +21,7 @@
 /*!\brief include from supplier.inc.php and concerned only the supplier card and
  * the supplier category
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_iselect.php");
 require_once("class_ihidden.php");
 require_once("class_bank.php");

include/card_attr.inc.php

@@ -23,6 +23,7 @@
 /*!\file
  * \brief Manage the attributs
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_fiche_attr.php');
 
 

include/cat_document.inc.php

@@ -26,6 +26,7 @@
  */
 
 // show list of document
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once ('class_document_type.php');
 
 if ( isset($_POST['add']) )

include/category_card.inc.php

@@ -26,6 +26,7 @@
  * include from client.inc.php and concerned only the customer card and
  * the customer category
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_contact.php');
 
 $str_dossier=Dossier::get();

include/category_detail.inc.php

@@ -32,6 +32,7 @@
 //----------------------------------------------------------------------------
 // Save modification
 //---------------------------------------------------------------------------
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 if ( isset ($_POST['mod']))
 {
 

include/category_followup.inc.php

@@ -27,6 +27,7 @@
  *  - sd = this parameter is used here
  *  - $cn = database connection
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_follow_up.php');
 
 /**

include/category_operation.inc.php

@@ -29,6 +29,7 @@
  * - $sub_action
  * - $ss_action
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_acc_ledger.php');
 $f=new Fiche($cn,$_REQUEST['f_id']);
 $qcode=$f->get_quick_code();

include/cfgfiche.inc.php

@@ -21,6 +21,7 @@
 /*! \file
  * \brief module to manage the card (removing, listing, creating, modify attribut)
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 include_once ("ac_common.php");
 require_once("class_itext.php");
 require_once("class_ihidden.php");

include/cfgledger.inc.php

@@ -27,6 +27,7 @@
  * @brief Create, update and delete ledgers
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_dossier.php');
 require_once ("ac_common.php");
 require_once('class_database.php');

include/client.inc.php

@@ -18,9 +18,11 @@
  */
 /* $Revision$ */
 // Copyright Author Dany De Bontridder ddebontridder@yahoo.fr
-/**\brief include from client.inc.php and concerned only the customer card and
+/**
+ * \brief include from client.inc.php and concerned only the customer card and
  * the customer category
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_iselect.php");
 require_once("class_ihidden.php");
 require_once("class_customer.php");

include/company.inc.php

@@ -1,5 +1,5 @@
 <?php
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 global $g_user;
 echo '<div class="content">';
 require_once("class_own.php");

include/compta_ach.inc.php

@@ -21,9 +21,11 @@
 
 // Copyright Author Dany De Bontridder ddebontridder@yahoo.fr
 
-/**\file
+/**
+ *\file
  * \brief file included to manage all the sold operation
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_icheckbox.php");
 require_once("class_acc_ledger_purchase.php");
 require_once ('class_pre_op_ach.php');

include/compta_fin.inc.php

@@ -23,6 +23,7 @@
 /*!\file
  * \brief this file is to be included to handle the financial ledger
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once ('class_acc_ledger_fin.php');
 require_once('class_ipopup.php');
 global $g_user,$g_parameter;

include/compta_fin_rec.inc.php

@@ -27,6 +27,7 @@
  * \brief reconcile operation
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 global $g_failed,$g_succeed;
 require_once 'class_acc_ledger_fin.php';
 bcscale(2);

include/compta_fin_saldo.inc.php

@@ -27,6 +27,7 @@
  * \brief show bank saldo
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once ('class_acc_parm_code.php');
     echo '<div class="content">';
     $fiche=new Fiche($cn);

include/compta_ods.inc.php

@@ -27,6 +27,7 @@
  * quant_purchase and quant_sold are not changed by this
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_icheckbox.php");
 require_once ('class_acc_ledger.php');
 require_once ('class_acc_reconciliation.php');

include/compta_ven.inc.php

@@ -23,6 +23,7 @@
 /*!\file
  * \brief file included to manage all the sold operation
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_icheckbox.php");
 require_once("class_acc_ledger_sold.php");
 require_once ('class_pre_op_ven.php');

include/contact.inc.php

@@ -21,6 +21,7 @@
 /**\brief include from client.inc.php and concerned only the contact card and
  * the contact category
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_iselect.php");
 require_once("class_ihidden.php");
 require_once("class_contact.php");

include/dashboard.inc.php

@@ -1,4 +1,5 @@
 <?php
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_idate.php");
 require_once("class_itext.php");
 require_once ('constant.php');

include/doc_state.inc.php

@@ -26,6 +26,7 @@
  * @brief Manage the status of the document (document_state)
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 global $cn;
 
 if ( isset($_POST['add']))

include/document_modele.inc.php

@@ -22,6 +22,7 @@
  * \brief Manage the document template
  */
 
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once("class_document_modele.php");
 $sub_action=(isset ($_REQUEST['sa']))?$_REQUEST['sa']:"";
 echo js_include('modele_document.js');

include/dossier.inc.php

@@ -19,7 +19,7 @@
 /* $Revision$ */
 
 // Copyright Author Dany De Bontridder ddebontridder@yahoo.fr
-
+if ( !defined ('ALLOWED')) die('Forbidden');
 /*!\file
 * \brief Management of the folder
  *

include/export_anc_acc_list_csv.php

@@ -24,6 +24,7 @@
 * \brief  export analytic list in csv
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 header('Pragma: public');
 header('Content-type: application/csv');
 header('Content-Disposition: attachment;filename="export-anc-list.csv"',FALSE);

include/export_anc_balance_double_csv.php

@@ -27,6 +27,7 @@
 /* \brief  export the operation in pdf
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 header('Content-type: application/csv');
 header('Pragma: public');
 header('Content-Disposition: attachment;filename="ca_bal_croise.csv"',FALSE);

include/export_anc_balance_double_pdf.php

@@ -23,7 +23,7 @@
 /*!\file
  * \brief export the operation in pdf
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once ('class_anc_balance_double.php');
 require_once ('header_print.php');
 

include/export_anc_balance_group_csv.php

@@ -23,7 +23,7 @@
 /*!\file
  * \brief export balance by group
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_anc_group.php');
 
 header('Pragma: public');

include/export_anc_balance_simple_csv.php

@@ -23,6 +23,7 @@
 /*!\file
 * \brief  export the operation in pdf
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 header('Pragma: public');
 header('Content-type: application/csv');
 header('Content-Disposition: attachment;filename="ca_bal_simple.csv"',FALSE);

include/export_anc_balance_simple_pdf.php

@@ -24,6 +24,7 @@
  * \brief export the operation in pdf
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once ('class_anc_balance_simple.php');
 
 $cn=new Database(dossier::id());

include/export_anc_grandlivre_csv.php

@@ -1,4 +1,5 @@
 <?php
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 header('Pragma: public');
 header('Content-type: application/csv');
 header('Content-Disposition: attachment;filename="anc-grand-livre.csv"',FALSE);

include/export_anc_list_csv.php

@@ -24,6 +24,7 @@
 * \brief  export the operation in pdf
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 header('Pragma: public');
 header('Content-type: application/csv');
 header('Content-Disposition: attachment;filename="jrn.csv"',FALSE);

include/export_anc_table_csv.php

@@ -23,7 +23,7 @@
 /*!\file
  * \brief export the anc tables in CSV
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 header('Pragma: public');
 header('Content-type: application/csv'); 
 header('Content-Disposition: attachment;filename="anc-table-export.csv"',FALSE);

include/export_balance_csv.php

@@ -21,6 +21,7 @@
 /*! \file
  * \brief Return the balance in CSV format
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 header('Pragma: public');
 header('Content-type: application/csv');
 header('Content-Disposition: attachment;filename="balance.csv"',FALSE);

include/export_balance_pdf.php

@@ -30,7 +30,7 @@
  */
 // Copyright Author Dany De Bontridder ddebontridder@yahoo.fr
 // $Revision$
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 include_once("ac_common.php");
 require_once('class_database.php');
 include_once("class_acc_balance.php");

include/export_bilan_oth.php

@@ -21,6 +21,7 @@
 /*! \file
  * \brief send a Bilan in RTF format
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 include_once("ac_common.php");
 include_once("class_impress.php");
 require_once('class_database.php');

include/export_fiche_balance_csv.php

@@ -24,6 +24,7 @@
  * \brief Called by impress->category, export in CVS the history of a category
  * of card
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 header('Pragma: public');
 header('Content-type: application/csv');
 header('Content-Disposition: attachment;filename="bal-fiche.csv"',FALSE);

include/export_fiche_balance_pdf.php

@@ -24,7 +24,7 @@
  * \brief Called by impress->category, export in PDF the history of a category or balance
  * of card
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 // Security we check if user does exist and his privilege
 require_once('class_user.php');
 require_once('class_database.php');

include/export_fiche_csv.php

@@ -21,7 +21,7 @@
 /*! \file
  * \brief Send a CSV file with card
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 header('Pragma: public');
 header('Content-type: application/csv');
 header('Content-Disposition: attachment;filename="fiche.csv"',FALSE);

include/export_fiche_detail_csv.php

@@ -21,6 +21,7 @@
 /*! \file
  * \brief Send the poste list in csv
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 include_once("ac_common.php");
 require_once('class_database.php');
 require_once("class_fiche.php");

include/export_fiche_detail_pdf.php

@@ -23,6 +23,7 @@
 /*! \file
  * \brief send the account list in PDF
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 include_once("class_acc_account_ledger.php");
 include_once("ac_common.php");
 require_once('class_database.php');

include/export_fiche_pdf.php

@@ -24,7 +24,7 @@
  * \brief Called by impress->category, export in PDF the history of a category
  * of card
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 // Security we check if user does exist and his privilege
 require_once('class_user.php');
 require_once('class_database.php');

include/export_follow_up_csv.php

@@ -26,6 +26,7 @@
  * @brief export Action Gestion to csv, taking in account the search
  *
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once 'class_follow_up.php';
 header('Pragma: public');
 header('Content-type: application/csv');

include/export_form_csv.php

@@ -21,6 +21,7 @@
 /*! \file
  * \brief Send a report in CSV format
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once ("ac_common.php");
 require_once('class_database.php');
 require_once ('class_user.php');

include/export_form_pdf.php

@@ -23,7 +23,7 @@
 /*! \file
  * \brief Send a report in PDF
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 include_once("class_acc_report.php");
 include_once("ac_common.php");
 require_once('class_database.php');

include/export_gl_csv.php

@@ -23,7 +23,7 @@
 /*! \file
  * \brief create GL comptes as PDF
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 include_once('class_acc_account_ledger.php');
 include_once('ac_common.php');
 require_once('class_database.php');

include/export_gl_pdf.php

@@ -23,7 +23,7 @@
 /*! \file
  * \brief create GL comptes as PDF
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 include_once('class_acc_account_ledger.php');
 include_once('ac_common.php');
 require_once('class_database.php');

include/export_histo_csv.php

@@ -23,7 +23,7 @@
 /*!\file
  * \brief  history of the accountancy exported in CSV
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 header('Pragma: public');
 header('Content-type: application/csv');
 header('Content-Disposition: attachment;filename="histo-export.csv"',FALSE);

include/export_ledger_csv.php

@@ -21,7 +21,7 @@
 /*! \file
  * \brief Send a ledger in CSV format
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 header('Pragma: public');
 header('Content-type: application/csv');
 header('Content-Disposition: attachment;filename="jrn.csv"',FALSE);

include/export_ledger_pdf.php

@@ -25,7 +25,7 @@
  * \brief Send a ledger in a pdf format
  *
  */
-
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once('class_dossier.php');
 $gDossier=dossier::id();
 require_once('class_pdf.php');

include/export_poste_detail_csv.php

@@ -21,6 +21,7 @@
 /*! \file
  * \brief Send the poste list in csv
  */
+if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 include_once("ac_common.php");
 require_once('class_database.php');
 require_once("class_acc_account_ledger.php");