Fix Cosmetic bug : analytic plan

Change : the class widget SELECT do not protect against Cross scripting
Fix Bug : the quick writing doesn't have a "use predefined operation"
Change : after computing the internal code the data member jr_internal is set
Bug : protect against CS in fiche_search.php
This commit is contained in:
Dany De Bontridder 2008-12-31 11:26:04 +00:00
parent 686c303a1a
commit d7473602cb
6 changed files with 13 additions and 8 deletions

View file

@ -162,7 +162,7 @@ class widget {
{
$checked=($this->selected==$this->value[$i]['value'])?"SELECTED":"";
$r.='<OPTION VALUE="'.$this->value[$i]['value'].'" '.$checked.'>';
$r.=h($this->value[$i]['label']);
$r.=$this->value[$i]['label'];
}
$r.="</SELECT>";
}