lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Correction bug du au register_globals

Browse Source
This commit is contained in:
Rodolphe Quiedeville 2004-07-13 17:48:10 +00:00
parent 7695e4350c
commit 260c1d65b3
1 changed files with 20 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
htdocs/product/fiche.php
View File

@ -36,7 +36,7 @@ if (!$user->rights->produit->lire)
llxHeader("","","Fiche produit"); llxHeader("","","Fiche produit");
if ($action == 'add') if ($_POST["action"] == 'add')
{ {
$product = new Product($db); $product = new Product($db);
@ -116,12 +116,12 @@ if ($_GET["action"] == 'remove_fourn')
{ {
if ($product->remove_fournisseur($user, $_GET["id_fourn"]) > 0) if ($product->remove_fournisseur($user, $_GET["id_fourn"]) > 0)
{ {
$action = ''; $_GET["action"] = '';
$mesg = 'Founisseur supprimé'; $mesg = 'Founisseur supprimé';
} }
else else
{ {
$action = ''; $_GET["action"] = '';
} }
} }
} }
@ -166,14 +166,14 @@ if ($_POST["action"] == 'update' &&
} }
if ($_POST["action"] == 'update_price' && if ($_POST["action"] == 'update_price' &&
$cancel <> 'Annuler' && $_POST["cancel"] <> 'Annuler' &&
( $user->rights->produit->modifier || $user->rights->produit->creer)) ( $user->rights->produit->modifier || $user->rights->produit->creer))
{ {
$product = new Product($db); $product = new Product($db);
$result = $product->fetch($id); $result = $product->fetch($_GET["id"]);
$product->price = $_POST["price"]; $product->price = $_POST["price"];
if ( $product->update_price($id, $user) > 0 ) if ( $product->update_price($_GET["id"], $user) > 0 )
{ {
$action = ''; $action = '';
$mesg = 'Fiche mise à jour'; $mesg = 'Fiche mise à jour';
@ -194,11 +194,11 @@ if ($cancel == 'Annuler')
* *
* *
*/ */
if ($action == 'create') if ($_GET["action"] == 'create')
{ {
$nbligne=0; $nbligne=0;
print "<form action=\"$PHP_SELF?type=$type\" method=\"post\">\n"; print "<form action=\"fiche.php?type=$type\" method=\"post\">\n";
print "<input type=\"hidden\" name=\"action\" value=\"add\">\n"; print "<input type=\"hidden\" name=\"action\" value=\"add\">\n";
print '<input type="hidden" name="type" value="'.$type.'">'."\n"; print '<input type="hidden" name="type" value="'.$type.'">'."\n";
print '<div class="titre">Nouveau '.$types[$type].'</div><br>'."\n"; print '<div class="titre">Nouveau '.$types[$type].'</div><br>'."\n";
@ -249,7 +249,7 @@ else
{ {
if ($_GET["id"]) if ($_GET["id"])
{ {
if ($action <> 're-edit') if ($_GET["action"] <> 're-edit')
{ {
$product = new Product($db); $product = new Product($db);
$result = $product->fetch($_GET["id"]); $result = $product->fetch($_GET["id"]);
@ -257,7 +257,7 @@ else
if ( $result ) if ( $result )
{ {
if ($action <> 'edit' && $action <> 're-edit') if ($_GET["action"] <> 'edit' && $_GET["action"] <> 're-edit')
{ {
/* /*
* Fiche en visu * Fiche en visu
@ -391,10 +391,10 @@ else
print "<br></div>\n"; print "<br></div>\n";
if ($action == 'edit_price' && $user->rights->produit->creer) if ($_GET["action"] == 'edit_price' && $user->rights->produit->creer)
{ {
print '<div class="titre">Nouveau prix</div>'; print '<div class="titre">Nouveau prix</div>';
print "<form action=\"$PHP_SELF?id=$id\" method=\"post\">\n"; print "<form action=\"fiche.php?id=$product->id\" method=\"post\">\n";
print '<input type="hidden" name="action" value="update_price">'; print '<input type="hidden" name="action" value="update_price">';
print '<table class="border" width="100%" cellspacing="0" cellpadding="4">'; print '<table class="border" width="100%" cellspacing="0" cellpadding="4">';
print '<tr><td width="20%">Prix de vente</td><td><input name="price" size="10" value="'.price($product->price).'"></td></tr>'; print '<tr><td width="20%">Prix de vente</td><td><input name="price" size="10" value="'.price($product->price).'"></td></tr>';
@ -443,11 +443,11 @@ else
* Fiche en mode edition * Fiche en mode edition
*/ */
if (($action == 'edit' || $action == 're-edit') && $user->rights->produit->creer) if (($_GET["action"] == 'edit' || $_GET["action"] == 're-edit') && $user->rights->produit->creer)
{ {
print_fiche_titre('Edition de la fiche '.$types[$product->type].' : '.$product->ref, $mesg); print_fiche_titre('Edition de la fiche '.$types[$product->type].' : '.$product->ref, $mesg);
print "<form action=\"$PHP_SELF?id=$id\" method=\"post\">\n"; print "<form action=\"fiche.php?id=$product->id\" method=\"post\">\n";
print '<input type="hidden" name="action" value="update">'; print '<input type="hidden" name="action" value="update">';
print '<table class="border" width="100%" cellspacing="0" cellpadding="4">'; print '<table class="border" width="100%" cellspacing="0" cellpadding="4">';
@ -545,31 +545,31 @@ else
print "<div class=\"tabsAction\">\n"; print "<div class=\"tabsAction\">\n";
if ($action == '') if ($_GET["action"] == '')
{ {
if ($user->rights->produit->modifier || $user->rights->produit->creer) if ($user->rights->produit->modifier || $user->rights->produit->creer)
{ {
print '<a class="tabAction" href="fiche.php?action=edit_price&amp;id='.$id.'">Changer le prix</a>'; print '<a class="tabAction" href="fiche.php?action=edit_price&amp;id='.$product->id.'">Changer le prix</a>';
} }
} }
if ($action == '') if ($_GET["action"] == '')
{ {
if ($user->rights->produit->modifier || $user->rights->produit->creer) if ($user->rights->produit->modifier || $user->rights->produit->creer)
{ {
print '<a class="tabAction" href="fiche.php?action=edit&amp;id='.$id.'">Editer</a>'; print '<a class="tabAction" href="fiche.php?action=edit&amp;id='.$product->id.'">Editer</a>';
} }
} }
if ($product->type == 0 && defined("MAIN_MODULE_STOCK")) if ($product->type == 0 && defined("MAIN_MODULE_STOCK"))
{ {
print '<a class="tabAction" href="stock/product.php?id='.$id.'&amp;action=correction">Correction stock</a>'; print '<a class="tabAction" href="stock/product.php?id='.$product->id.'&amp;action=correction">Correction stock</a>';
} }
print "</div>"; print "</div>";
if ($id && $action == '' && $product->envente) if ($id && $_GET["action"] == '' && $product->envente)
{ {
$htmls = new Form($db); $htmls = new Form($db);