From 7aa40af2c580fb99249e1fc0fa994fadb921096f Mon Sep 17 00:00:00 2001
From: Dany De Bontridder <dany@alchimerys.be>
Date: Mon, 9 Jan 2012 13:12:40 +0000
Subject: [PATCH] protect string against js

---
 include/class_fiche_attr.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/include/class_fiche_attr.php b/include/class_fiche_attr.php
index 6fa0b7425..7313db544 100644
--- a/include/class_fiche_attr.php
+++ b/include/class_fiche_attr.php
@@ -95,7 +95,7 @@ class Fiche_Attr
                         $this->cn->exec_sql($this->ad_extra);
                 }catch (Exception $e)
                 {
-                    throw new Exception ("La requête SQL est invalide ");
+                    throw new Exception ("La requête SQL ".h($this->ad_extra)." est invalide ");
                 }
         }
     }