lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

db escape

Browse Source
This commit is contained in:
Frédéric FRANCE 2019-10-02 08:18:36 +02:00
parent 27cc92f6ca
commit 13eb76a5b7
No known key found for this signature in database
GPG Key ID: 06809324E4B2ABC1
2 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
htdocs/fichinter/card-rec.php
View File

@ -366,7 +366,7 @@ if ($action == 'create') {
print load_fiche_titre($title, '', ''); print load_fiche_titre($title, '', '');
/* /*
* Invoice lines * Fichinter lines
*/ */
print '<table class="notopnoleftnoright" width="100%">'; print '<table class="notopnoleftnoright" width="100%">';
print '<tr><td colspan="3">'; print '<tr><td colspan="3">';
@ -403,15 +403,16 @@ if ($action == 'create') {
print $text.' '.nl2br($objp->description); print $text.' '.nl2br($objp->description);
// Qty // Duration
print '<td class="center">'.convertSecondToTime($objp->duree).'</td>'; print '<td class="center">'.convertSecondToTime($objp->duree).'</td>';
print "</tr>"; print "</tr>";
$i++; $i++;
} }
$db->free($result); $db->free($result);
} else } else {
print $db->error(); print $db->error();
}
print "</table>"; print "</table>";
print '</td></tr>'; print '</td></tr>';
@ -426,8 +427,9 @@ if ($action == 'create') {
print '</div>'; print '</div>';
print "</form>\n"; print "</form>\n";
} }
else else {
dol_print_error('', "Error, no invoice ".$object->id); dol_print_error('', "Error, no invoice ".$object->id);
}
} elseif ($action == 'selsocforcreatefrommodel') { } elseif ($action == 'selsocforcreatefrommodel') {
print load_fiche_titre($langs->trans("CreateRepeatableIntervention"), '', 'commercial'); print load_fiche_titre($langs->trans("CreateRepeatableIntervention"), '', 'commercial');
dol_fiche_head(''); dol_fiche_head('');
@ -888,9 +890,10 @@ if ($action == 'create') {
print "</table>"; print "</table>";
$db->free($resql); $db->free($resql);
} else } else {
dol_print_error($db); dol_print_error($db);
} }
} }
}
llxFooter(); llxFooter();
$db->close(); $db->close();

2
htdocs/fichinter/class/fichinterrec.class.php
View File

@ -516,7 +516,7 @@ class FichinterRec extends Fichinter
//$sql.= ", special_code"; //$sql.= ", special_code";
$sql.= ", fk_unit"; $sql.= ", fk_unit";
$sql.= ") VALUES ("; $sql.= ") VALUES (";
$sql.= "'".$this->id."'"; $sql.= $this->id;
$sql.= ", ".(! empty($label)?"'".$this->db->escape($label)."'":"null"); $sql.= ", ".(! empty($label)?"'".$this->db->escape($label)."'":"null");
$sql.= ", ".(! empty($desc)?"'".$this->db->escape($desc)."'":"null"); $sql.= ", ".(! empty($desc)?"'".$this->db->escape($desc)."'":"null");
$sql.= ", ".(! empty($datei)?"'".$this->db->idate($datei)."'":"null"); $sql.= ", ".(! empty($datei)?"'".$this->db->idate($datei)."'":"null");