amélioration de la sécurité

This commit is contained in:
Regis Houssin 2006-03-10 18:08:37 +00:00
parent 6c1ff2d6d3
commit 0248992ff2
3 changed files with 8 additions and 8 deletions

View File

@ -65,9 +65,9 @@ llxHeader();
*/ */
$soc = new Societe($db); $soc = new Societe($db);
$soc->id = $_GET["socid"]; $soc->id = $socid;
$soc->fetch($_GET["socid"]); $soc->fetch($socid);
$soc->info($_GET["socid"]); $soc->info($socid);
$h=0; $h=0;

View File

@ -110,7 +110,7 @@ if ($_GET["action"] == 'delete')
* *
*/ */
$soc = new Societe($db); $soc = new Societe($db);
$soc->id = $_GET["socid"]; $soc->id = $socid;
if ( $soc->fetch($soc->id) ) if ( $soc->fetch($soc->id) )
{ {

View File

@ -59,7 +59,7 @@ if ($_POST["action"] == 'add') {
$sql = "UPDATE ".MAIN_DB_PREFIX."societe SET note='".addslashes($_POST["note"])."' WHERE idp=".$_POST["socid"]; $sql = "UPDATE ".MAIN_DB_PREFIX."societe SET note='".addslashes($_POST["note"])."' WHERE idp=".$_POST["socid"];
$result = $db->query($sql); $result = $db->query($sql);
$_GET["socid"]=$_POST["socid"]; // Pour retour sur fiche $socid=$_POST["socid"]; // Pour retour sur fiche
} }
@ -69,10 +69,10 @@ if ($_POST["action"] == 'add') {
llxHeader(); llxHeader();
if ($_GET["socid"] > 0) if ($socid > 0)
{ {
$societe = new Societe($db, $_GET["socid"]); $societe = new Societe($db, $socid);
$societe->fetch($_GET["socid"]); $societe->fetch($socid);
$h=0; $h=0;