From b38e10d2ce9554b2321d4e635993039161dd2a4c Mon Sep 17 00:00:00 2001
From: Dany De Bontridder <dany@alchimerys.be>
Date: Fri, 25 Mar 2016 08:56:55 +0100
Subject: [PATCH] fid.php : retrieve parameters with safe function

---
 html/fid.php | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/html/fid.php b/html/fid.php
index a09530196..6953e08af 100644
--- a/html/fid.php
+++ b/html/fid.php
@@ -56,8 +56,10 @@ $fPrice_purchase=(isset($_REQUEST['b']))?$_REQUEST['b']:'none';
 
 if ( isset($_SESSION['isValid']) && $_SESSION['isValid'] == 1)
 {
+    $jrn=HtmlInput::default_value_get('j', '-1');
     $jrn=sql_string($_GET['j']);
-    $d=sql_string($_GET['d']);
+    $d=HtmlInput::default_value_get('d', '');
+    $d=sql_string($d);
 
     if ( $jrn == -1 )
         $d='all';