fid.php : retrieve parameters with safe function

This commit is contained in:
Dany De Bontridder 2016-03-25 08:56:55 +01:00
parent 2fed7bc701
commit b38e10d2ce

View file

@ -56,8 +56,10 @@ $fPrice_purchase=(isset($_REQUEST['b']))?$_REQUEST['b']:'none';
if ( isset($_SESSION['isValid']) && $_SESSION['isValid'] == 1)
{
$jrn=HtmlInput::default_value_get('j', '-1');
$jrn=sql_string($_GET['j']);
$d=sql_string($_GET['d']);
$d=HtmlInput::default_value_get('d', '');
$d=sql_string($d);
if ( $jrn == -1 )
$d='all';