From 8722a015293a29131f1951eed8eccab5cbebc3da Mon Sep 17 00:00:00 2001
From: Dany wm DB <danydb@noalyss.eu>
Date: Sun, 8 Jun 2025 13:10:08 +0200
Subject: [PATCH] Stock protect against direct access to $_GET

---
 include/ajax/ajax_mod_stock_repo.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/include/ajax/ajax_mod_stock_repo.php b/include/ajax/ajax_mod_stock_repo.php
index 738245d40..ac4de4d92 100644
--- a/include/ajax/ajax_mod_stock_repo.php
+++ b/include/ajax/ajax_mod_stock_repo.php
@@ -28,11 +28,11 @@
 if ( ! defined ('ALLOWED') ) die('Appel direct ne sont pas permis');
 require_once NOALYSS_INCLUDE.'/database/stock_sql.class.php';
 $cn=Dossier::connect();
-$st=new Stock_Sql($cn,$_GET['r_id']);
+$st=new Stock_Sql($cn,$http->get('r_id','number'));
 ?>
-<?php echo HtmlInput::title_box("Ajouter un dépôt","change_stock_repo_div","close")?>
+<?php echo HtmlInput::title_box("Modifier un dépôt","change_stock_repo_div","close")?>
 	<form method="post">
-		<?php echo HtmlInput::hidden("r_id",$_GET['r_id']);?>
+		<?php echo HtmlInput::hidden("r_id",$http->get('r_id','number'));?>
 		<table>
 			<tr>
 				<td>