diff --git a/include/modele.inc.php b/include/modele.inc.php index 760c5a317..a7f1d454b 100644 --- a/include/modele.inc.php +++ b/include/modele.inc.php @@ -54,32 +54,32 @@ if (isset($_POST['upd']) && $cn = new Database(); - +$fmod_dbid=HtmlInput::default_value_post("FMOD_DBID", 0); // IF FMOD_NAME is posted then must add a template if (isset($_POST["FMOD_NAME"])) { - $encoding = $cn->get_value("select encoding from pg_database where " . - " datname='" . domaine . 'dossier' . sql_string($_POST["FMOD_DBID"]) . "'"); + $encoding = $cn->get_value("select encoding from pg_database where " . + " datname='" . domaine . 'dossier' . sql_string($fmod_dbid) . "'"); if ($encoding != 6) { alert(_('Désolé vous devez migrer ce modèle en unicode')); - echo ''._('la base de donnée')." " . - domaine . 'mod' . $_POST["FMOD_DBID"]." " . _("doit être migrée en unicode").""; + echo ''; + printf (_('la base de donnée %smod%s doit être migrée en unicode'),domaine,$fmod_dbid); + echo ""; echo ' '._("Pour le passer en unicode, faites-en un backup puis restaurez le fichier reçu").''; echo HtmlInput::button_anchor(_('Retour'), 'admin_repo.php?action=dossier_mgt'); return; } - $mod_name = sql_string($_POST["FMOD_NAME"]); - $mod_desc = sql_string($_POST["FMOD_DESC"]); - if ($mod_name != null) + $mod_name = HtmlInput::default_value_post("FMOD_NAME",null); + $mod_desc = HtmlInput::default_value_post("FMOD_DESC",null); + if ($mod_name != null || trim ($mod_name) != "") { $Res = $cn->exec_sql("insert into modeledef(mod_name,mod_desc) - values ('" . $mod_name . "'," . - "'" . $mod_desc . "')"); + values ($1,$2)",array($mod_name,$mod_desc)); // get the mod_id $l_id = $cn->get_current_seq('s_modid'); @@ -90,14 +90,20 @@ if (isset($_POST["FMOD_NAME"])) if ($cn->exec_sql($Sql) == false) { ob_end_clean(); - echo "