';
+if ( isDate($_GET['start']) == null || isDate($_GET['end']) == null ) {
+ echo alert(_('Date malformée, désolé'));
+ exit();
+}
$letter=new Lettering_Account($cn);
$letter->set_parameter('account',$_GET['acc']);
$letter->set_parameter('start',$_GET['start']);
diff --git a/include/lettering.card.inc.php b/include/lettering.card.inc.php
index 356ed6b89..32c15c8b8 100644
--- a/include/lettering.card.inc.php
+++ b/include/lettering.card.inc.php
@@ -112,6 +112,11 @@ if ( isset($_POST['record'])) {
// Show the result
//--------------------------------------------------------------------------------
echo '
';
+if ( isDate($_GET['start']) == null || isDate($_GET['end']) == null ) {
+ echo alert(_('Date malformée, désolé'));
+ exit();
+}
+
$letter=new Lettering_Card($cn);
$quick_code=strtoupper(trim($_GET['acc']));
$letter->set_parameter('quick_code',$quick_code);
diff --git a/include/lettering.gestion.inc.php b/include/lettering.gestion.inc.php
index 173b3465d..2367036b6 100644
--- a/include/lettering.gestion.inc.php
+++ b/include/lettering.gestion.inc.php
@@ -59,6 +59,11 @@ if ( isset($_POST['record'])) {
//--------------------------------------------------------------------------------
// Show the result
//--------------------------------------------------------------------------------
+if ( isDate($_GET['start']) == null || isDate($_GET['end']) == null ) {
+ echo alert(_('Date malformée, désolé'));
+ exit();
+}
+
echo '
';
$fiche=new Fiche($cn,$_REQUEST['f_id']);
$quick_code=$fiche->get_quick_code();