lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: use POST instead GET for bypass GET limit

Browse Source
This commit is contained in:
Regis Houssin 2012-02-13 12:40:43 +01:00
parent 637dca38e7
commit 1f5a103851
2 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
htdocs/core/ajax/row.php
View File

@ -40,22 +40,22 @@ top_httphead();
print '<!-- Ajax page called with url '.$_SERVER["PHP_SELF"].'?'.$_SERVER["QUERY_STRING"].' -->'."\n"; print '<!-- Ajax page called with url '.$_SERVER["PHP_SELF"].'?'.$_SERVER["QUERY_STRING"].' -->'."\n";
// Registering the location of boxes // Registering the location of boxes
if((isset($_GET['roworder']) && !empty($_GET['roworder'])) && (isset($_GET['table_element_line']) && !empty($_GET['table_element_line'])) if ((isset($_POST['roworder']) && ! empty($_POST['roworder'])) && (isset($_POST['table_element_line']) && ! empty($_POST['table_element_line']))
&& (isset($_GET['fk_element']) && !empty($_GET['fk_element'])) && (isset($_GET['element_id']) && !empty($_GET['element_id'])) ) && (isset($_POST['fk_element']) && ! empty($_POST['fk_element'])) && (isset($_POST['element_id']) && ! empty($_POST['element_id'])) )
{ {
$roworder = explode(',',$_GET['roworder']); $roworder = explode(',',GETPOST('roworder','alpha',2));
foreach($roworder as $value) foreach($roworder as $value)
{ {
if (! empty($value)) $newroworder[] = $value; if (! empty($value)) $newroworder[] = $value;
} }
dol_syslog("AjaxRow roworder=".$_GET['roworder']." fk_element=".$_GET['fk_element'], LOG_DEBUG); dol_syslog("AjaxRow roworder=".GETPOST('roworder','alpha',2)." fk_element=".GETPOST('fk_element','int',2), LOG_DEBUG);
$row=new GenericObject($db); $row=new GenericObject($db);
$row->table_element_line = $_GET['table_element_line']; $row->table_element_line = GETPOST('table_element_line','alpha',2);
$row->fk_element = $_GET['fk_element']; $row->fk_element = GETPOST('fk_element','int',2);
$row->id = $_GET['element_id']; $row->id = GETPOST('element_id','int',2);
$result=$row->line_ajaxorder($newroworder); $result=$row->line_ajaxorder($newroworder);
$result=$row->line_order(true); $result=$row->line_order(true);
} }

2
htdocs/core/tpl/ajaxrow.tpl.php
View File

@ -36,7 +36,7 @@ $(document).ready(function(){
var table_element_line = "<?php echo $object->table_element_line; ?>"; var table_element_line = "<?php echo $object->table_element_line; ?>";
var fk_element = "<?php echo $object->fk_element; ?>"; var fk_element = "<?php echo $object->fk_element; ?>";
var element_id = "<?php echo $object->id; ?>"; var element_id = "<?php echo $object->id; ?>";
$.get("<?php echo DOL_URL_ROOT; ?>/core/ajax/row.php", $.post("<?php echo DOL_URL_ROOT; ?>/core/ajax/row.php",
{ {
roworder: roworder, roworder: roworder,
table_element_line: table_element_line, table_element_line: table_element_line,