lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: bypass GETPOST check with ckeditor

Browse Source
This commit is contained in:
Regis Houssin 2012-03-18 15:15:11 +01:00
parent 370979f6c6
commit 05a5a0fc9a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/core/ajax/saveinplace.php
View File

@ -49,8 +49,8 @@ if (! empty($field) && ! empty($element) && ! empty($table_element) && ! empty($
{ {
$ext_element = GETPOST('ext_element','alpha'); $ext_element = GETPOST('ext_element','alpha');
$field = substr($field, 8); // remove prefix val_ $field = substr($field, 8); // remove prefix val_
$value = GETPOST('value','alpha');
$type = GETPOST('type','alpha'); $type = GETPOST('type','alpha');
$value = ($type == 'ckeditor' ? GETPOST('value') : GETPOST('value','alpha'));
$savemethod = GETPOST('savemethod','alpha'); $savemethod = GETPOST('savemethod','alpha');
$savemethodname = (! empty($savemethod) ? $savemethod : 'setValueFrom'); $savemethodname = (! empty($savemethod) ? $savemethod : 'setValueFrom');