From bde8eba87d605edbf863f8853dc70652a8e2704c Mon Sep 17 00:00:00 2001
From: Dany De Bontridder <dany@alchimerys.be>
Date: Mon, 9 Jan 2012 11:28:48 +0000
Subject: [PATCH] =?UTF-8?q?V=C3=A9rifie=20que=20ad=5Fextra=20contient=20un?=
 =?UTF-8?q?=20SQL=20valide?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 include/class_fiche_attr.php | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/include/class_fiche_attr.php b/include/class_fiche_attr.php
index 02e3e419d..b5308aea3 100644
--- a/include/class_fiche_attr.php
+++ b/include/class_fiche_attr.php
@@ -82,6 +82,14 @@ class Fiche_Attr
             case 'zone':
                 $this->ad_size=22;
                 break;
+            case 'select':
+                $this->ad_size=22;
+                try{
+                    $a=$this->cn->exec_sql($this->ad_extra);
+                }catch (Exception $e)
+                {
+                    throw new Exception ("La requête SQL est invalide ");
+                }
             default:
                 $this->ad_size=22;
             }
@@ -89,6 +97,7 @@ class Fiche_Attr
     }
     public function save()
     {
+       
         /* please adapt */
         if (  $this->ad_id == 0 )
             $this->insert();