From 06c4e083a038f886a262620dfbebc2a7c7870bc1 Mon Sep 17 00:00:00 2001
From: Laurent Destailleur <eldy@users.sourceforge.net>
Date: Sun, 7 Oct 2007 13:19:23 +0000
Subject: [PATCH] =?UTF-8?q?Fix:=20Fonction=20dolibarr=5Fdel=5Fconst=20inco?=
 =?UTF-8?q?mpl=E8te?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 htdocs/lib/functions.inc.php | 27 +++++++++++++++------------
 1 file changed, 15 insertions(+), 12 deletions(-)

diff --git a/htdocs/lib/functions.inc.php b/htdocs/lib/functions.inc.php
index 22ffbbb3783..b8018e147ff 100644
--- a/htdocs/lib/functions.inc.php
+++ b/htdocs/lib/functions.inc.php
@@ -343,7 +343,7 @@ function dolibarr_set_const($db, $name, $value, $type='chaine', $visible=0, $not
     }
 
     //dolibarr_syslog("dolibarr_set_const name=$name, value=$value");
-    $sql = "DELETE FROM llx_const WHERE name = '$name';";
+    $sql = "DELETE FROM llx_const WHERE name = '".addslashes($name)."';";
     $resql=$db->query($sql);
 
     $sql = "INSERT INTO llx_const(name,value,type,visible,note)";
@@ -372,17 +372,20 @@ function dolibarr_set_const($db, $name, $value, $type='chaine', $visible=0, $not
 */
 function dolibarr_del_const($db, $name)
 {
-  $sql = "DELETE FROM llx_const WHERE name='$name' or rowid='$name'";
-  $resql=$db->query($sql);
-  
-  if ($resql)
-    {
-      return 1;
-    }
-  else
-    {
-      return -1;
-    }
+	global $conf;
+	
+	$sql = "DELETE FROM llx_const";
+	$sql.=" WHERE name='".addslashes($name)."' or rowid='".addslashes($name)."'";
+	$resql=$db->query($sql);
+	if ($resql)
+	{
+		$conf->global->$name='';
+		return 1;
+	}
+	else
+	{
+		return -1;
+	}
 }