lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: Pb register_globals=off

Browse Source
This commit is contained in:
Laurent Destailleur 2005-01-16 19:05:40 +00:00
parent 0385499416
commit 34a5ef6793
1 changed files with 18 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
htdocs/comm/propal/document.php
View File

@ -1,6 +1,6 @@
<?php <?php
/* Copyright (C) 2003-2004 Rodolphe Quiedeville <rodolphe@quiedeville.org> /* Copyright (C) 2003-2004 Rodolphe Quiedeville <rodolphe@quiedeville.org>
* Copyright (C) 2004 Laurent Destailleur <eldy@users.sourceforge.net> * Copyright (C) 2004-2005 Laurent Destailleur <eldy@users.sourceforge.net>
* *
* This program is free software; you can redistribute it and/or modify * This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by * it under the terms of the GNU General Public License as published by
@ -20,7 +20,7 @@
* $Source$ * $Source$
*/ */
/*! \file htdocs/comm/propal/document.php /** \file htdocs/comm/propal/document.php
\ingroup propale \ingroup propale
\brief Page de gestion des documents attachées à une proposition commerciale \brief Page de gestion des documents attachées à une proposition commerciale
\version $Revision$ \version $Revision$
@ -38,6 +38,7 @@ if (!$user->rights->propale->lire)
llxHeader(); llxHeader();
function do_upload ($upload_dir) function do_upload ($upload_dir)
{ {
global $local_file, $error_msg; global $local_file, $error_msg;
@ -61,13 +62,16 @@ function do_upload ($upload_dir)
} }
if ($id > 0)
if ($_GET["id"] > 0)
{ {
$propal = new Propal($db); $propal = new Propal($db);
if ( $propal->fetch($id) )
if ($propal->fetch($_GET["id"]))
{ {
$upload_dir = PROPALE_OUTPUTDIR . "/" . $propal->ref ; $upload_dir = $conf->propal->dir_output . "/" . $propal->ref ;
if ( $error_msg ) if ( $error_msg )
{ {
@ -85,20 +89,18 @@ if ($id > 0)
do_upload ($upload_dir); do_upload ($upload_dir);
} }
/*
* print '<table width="100%" class="noborder">';
*/
print "<table width=\"100%\" border=\"0\" cellspacing=\"1\">\n";
print "<tr><td><div class=\"titre\">Documents associés à la proposition : ".$propal->ref_url."</div></td>"; print "<tr><td><div class=\"titre\">Documents associés à la proposition : ".$propal->ref_url."</div></td>";
print "</tr></table>"; print "</tr></table>";
echo '<FORM NAME="userfile" ACTION="document.php?id='.$propal->id.'" ENCTYPE="multipart/form-data" METHOD="POST">'; print '<form name="userfile" action="document.php?id='.$propal->id.'" enctype="multipart/form-data" method="POST">';
print '<input type="hidden" name="max_file_size" value="2000000">'; print '<input type="hidden" name="max_file_size" value="2000000">';
print '<input type="file" name="userfile" size="40" maxlength="80"><br>'; print '<input type="file" name="userfile" size="40" maxlength="80"><br>';
print '<input type="submit" value="Upload File!" name="sendit">'; print '<input type="submit" value="'.$langs->trans("Upload").'" name="sendit">';
print '<input type="submit" value="'.$langs->trans("Cancel").'" name="cancelit"><BR>'; print '<input type="submit" value="'.$langs->trans("Cancel").'" name="cancelit"><br>';
print '</FORM>'; print '</form><br>';
clearstatcache(); clearstatcache();
@ -106,14 +108,14 @@ if ($id > 0)
if ($handle) if ($handle)
{ {
print '<table width="100%" border="1" cellpadding="3" cellspacing="0">'; print '<table width="100%" class="border">';
while (($file = readdir($handle))!==false) while (($file = readdir($handle))!==false)
{ {
if (!is_dir($dir.$file) && substr($file, 0, 1) <> '.' && substr($file, 0, 3) <> 'CVS') if (!is_dir($dir.$file) && substr($file, 0, 1) <> '.' && substr($file, 0, 3) <> 'CVS')
{ {
print '<tr><td>'; print '<tr><td>';
echo '<a target="_blank" href="'.DOL_URL_ROOT.'/document/propale/'.$propal->ref.'/'.$file.'">'.$file.'</a>'; echo '<a target="_blank" href="'.DOL_URL_ROOT.'/document.php?modulepart=propal&file='.urlencode($propal->ref.'/'.$file).'">'.$file.'</a>';
print "</td>\n"; print "</td>\n";
print '<td align="right">'.filesize($upload_dir."/".$file). ' bytes</td>'; print '<td align="right">'.filesize($upload_dir."/".$file). ' bytes</td>';
@ -126,7 +128,7 @@ if ($id > 0)
} }
else else
{ {
echo '<a href="document.php?id='.$propal->id.'&action=delete&urlfile='.urlencode($file).'">Supprimer</a>'; echo '<a href="'.DOL_URL_ROOT.'/comm/propal/document.php?id='.$propal->id.'&action=delete&urlfile='.urlencode($file).'">'.$langs->trans("Delete").'</a>';
} }
print "</td></tr>\n"; print "</td></tr>\n";
} }