admingit/altocompta
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security fix : f_id is a number

Browse source
This commit is contained in:
Dany De Bontridder 2018-06-02 08:28:44 +02:00
parent ecc3b531a8
commit 8d90926efe
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
include/category_card.inc.php
View file

@ -34,7 +34,7 @@ global $http;
$str_dossier=Dossier::get();
$root="?".http_build_query(["ac"=>$http->request("ac"),"sb"=>"detail","f_id"=>$http->request("f_id")]);
$root="?".http_build_query(["ac"=>$http->request("ac"),"sb"=>"detail","f_id"=>$http->request("f_id","number")]);
$root.="&".$str_dossier;
$ss_action=$http->request("sc", "string", "dc");