lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: $id and $rowid conflict

Browse Source
This commit is contained in:
Regis Houssin 2012-06-14 09:12:52 +02:00
parent 26a4c6c925
commit 159206d52c
1 changed files with 21 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
htdocs/comm/mailing/cibles.php
View File

@ -48,7 +48,8 @@ $pagenext = $page + 1;
if (! $sortorder) $sortorder="ASC"; if (! $sortorder) $sortorder="ASC";
if (! $sortfield) $sortfield="email"; if (! $sortfield) $sortfield="email";
$id=GETPOST('rowid')?GETPOST('rowid'):GETPOST('id','int'); $id=GETPOST('id','int');
$rowid=GETPOST('rowid','int');
$action=GETPOST("action"); $action=GETPOST("action");
$search_nom=GETPOST("search_nom"); $search_nom=GETPOST("search_nom");
$search_prenom=GETPOST("search_prenom"); $search_prenom=GETPOST("search_prenom");
@ -126,15 +127,18 @@ if ($action == 'clear')
if ($action == 'delete') if ($action == 'delete')
{ {
// Ici, rowid indique le destinataire et id le mailing // Ici, rowid indique le destinataire et id le mailing
$sql="DELETE FROM ".MAIN_DB_PREFIX."mailing_cibles WHERE rowid=".$id; $sql="DELETE FROM ".MAIN_DB_PREFIX."mailing_cibles WHERE rowid=".$rowid;
$resql=$db->query($sql); $resql=$db->query($sql);
if ($resql) if ($resql)
{ //on récurpére l'id du mailing {
$id = GETPOST('id','int');
if (!empty($id)) if (!empty($id))
{ {
$file = $dirmod."/modules_mailings.php"; foreach ($modulesdir as $dir)
{
$file = $modulesdir."/modules_mailings.php";
if (file_exists($file))
{
$classname = "MailingTargets"; $classname = "MailingTargets";
require_once($file); require_once($file);
@ -144,6 +148,8 @@ if ($action == 'delete')
Header("Location: ".$_SERVER['PHP_SELF']."?id=".$id); Header("Location: ".$_SERVER['PHP_SELF']."?id=".$id);
exit; exit;
} }
}
}
else else
{ {
Header("Location: liste.php"); Header("Location: liste.php");
@ -295,7 +301,7 @@ if ($object->fetch($id) >= 0)
if ($object->statut == 0) if ($object->statut == 0)
{ {
print '<form name="'.$modulename.'" action="cibles.php?action=add&rowid='.$object->id.'&module='.$modulename.'" method="POST" enctype="multipart/form-data">'; print '<form name="'.$modulename.'" action="'.$_SERVER['PHP_SELF'].'?action=add&id='.$object->id.'&module='.$modulename.'" method="POST" enctype="multipart/form-data">';
print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">'; print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">';
} }