Avoid dynamic var

This commit is contained in:
Laurent Destailleur 2020-11-25 12:46:03 +01:00
parent bac24485c2
commit 4917403365

View File

@ -35,15 +35,13 @@ if (!$user->rights->opensurvey->write) accessforbidden();
$langs->load("opensurvey"); $langs->load("opensurvey");
// On teste toutes les variables pour supprimer l'ensemble des warnings PHP $title = GETPOST('title');
// On transforme en entites html les données afin éviter les failles XSS $description = GETPOST('description', 'restricthtml');
$post_var = array('title', 'description', 'mailsonde', 'creation_sondage_date', 'creation_sondage_autre'); $mailsonde = GETPOST('mailsonde');
foreach ($post_var as $var) $creation_sondage_date = GETPOST('creation_sondage_date');
{ $creation_sondage_date = GETPOST('creation_sondage_date');
$$var = GETPOST($var);
}
// On initialise egalement la session car sinon bonjour les warning :-) // We init some session variable to avoir warning
$session_var = array('title', 'description', 'mailsonde'); $session_var = array('title', 'description', 'mailsonde');
foreach ($session_var as $var) foreach ($session_var as $var)
{ {