lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix sql injection

Browse Source
This commit is contained in:
Laurent Destailleur 2021-08-24 16:38:39 +02:00
parent 90c12ae340
commit 07053d8605
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/expedition/list.php
View File

@ -320,7 +320,7 @@ if ($search_country) {
$sql .= " AND s.fk_pays IN (".$db->sanitize($search_country).')';
}
if ($search_shipping_method_id > 0) {
$sql .= " AND e.fk_shipping_method = ".$search_shipping_method_id;
$sql .= " AND e.fk_shipping_method = ".((int) $search_shipping_method_id);
}
if ($search_tracking) {
$sql .= natural_search("e.tracking_number", $search_tracking);