Fix : security fixes see rapport exakat (Damien Seguy)
This commit is contained in:
parent
05fd1bd099
commit
ecc3b531a8
7 changed files with 26 additions and 20 deletions
|
|
@ -48,13 +48,14 @@ $g_user=new User($cn);
|
|||
$g_user->check();
|
||||
$g_user->check_dossier(dossier::id());
|
||||
set_language();
|
||||
$fLabel=(isset($_REQUEST['l']))?$_REQUEST['l']:'none';
|
||||
$fTva_id=(isset($_REQUEST['t']))?$_REQUEST['t']:'none';
|
||||
$fPrice_sale=(isset($_REQUEST['p']))?$_REQUEST['p']:'none';
|
||||
$fPrice_purchase=(isset($_REQUEST['b']))?$_REQUEST['b']:'none';
|
||||
|
||||
$hi=new HttpInput();
|
||||
|
||||
$fLabel=$hi->request("l","string","none");
|
||||
$fTva_id=$hi->request("t","string","none");
|
||||
$fPrice_sale=$hi->request("p","string","none");
|
||||
$fPrice_purchase=$hi->request("b","string","none");
|
||||
|
||||
if ( isset($_SESSION['isValid']) && $_SESSION['isValid'] == 1)
|
||||
{
|
||||
$jrn=$hi->get('j', "number",'-1');
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue