From a44e613bb7055a0758b9d19262fb932099e538e1 Mon Sep 17 00:00:00 2001
From: Dany De Bontridder <dany@alchimerys.be>
Date: Sat, 24 Oct 2015 15:18:05 +0200
Subject: [PATCH] protect variable

---
 include/action.common.inc.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/include/action.common.inc.php b/include/action.common.inc.php
index 09b0ed201..06825c19f 100644
--- a/include/action.common.inc.php
+++ b/include/action.common.inc.php
@@ -94,7 +94,11 @@ if (isset($_POST['generate']))
 	{
 		$act->Update();
 	}
-	$act->generate_document($_POST['doc_mod'], $_POST);
+        $doc_mod=HtmlInput::default_value_post('doc_mod', "-1");
+        if ( $doc_mod == "-1") {
+            throw new Exception(_('Donnée invalide'));
+        }
+	$act->generate_document($doc_mod, $_POST);
 	$sub_action = 'detail';
 }
 /* for delete  */