From 82efa19bd0ab40f42f45922bc0fc55887f6e0683 Mon Sep 17 00:00:00 2001
From: sparkyx <danydb@noalyss.eu>
Date: Thu, 12 Nov 2020 18:00:55 +0100
Subject: [PATCH] Security remove direct access to $_REQUEST

---
 include/class/anc_print.class.php | 11 ++++++-----
 1 file changed, 6 insertions(+), 5 deletions(-)

diff --git a/include/class/anc_print.class.php b/include/class/anc_print.class.php
index dedefcb2a..9f72e499c 100644
--- a/include/class/anc_print.class.php
+++ b/include/class/anc_print.class.php
@@ -62,19 +62,20 @@ class Anc_Print
      */
     function get_request()
     {
+        $http=new HttpInput();
         if ( isset($_REQUEST['from']))
-            $this->from=$_REQUEST['from'];
+            $this->from=$http->request('from');
 
         if ( isset($_REQUEST['to']))
-            $this->to=$_REQUEST['to'];
+            $this->to=$http->request('to');
 
         if ( isset($_REQUEST['from_poste']))
-            $this->from_poste=$_REQUEST['from_poste'];
+            $this->from_poste=$http->request('from_poste');
 
         if ( isset($_REQUEST['to_poste']))
-            $this->to_poste=$_REQUEST['to_poste'];
+            $this->to_poste=$http->request('to_poste');
         if ( isset($_REQUEST['pa_id']))
-            $this->pa_id=$_REQUEST['pa_id'];
+            $this->pa_id=$http->request('pa_id');
         else
             $this->pa_id="";