lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

FIX Param joinfiles not sanitized

Browse Source 
Conflicts:
	htdocs/admin/mails_templates.php
This commit is contained in:
Laurent Destailleur 2020-11-26 23:05:49 +01:00
parent b043442b91
commit 4da4499569
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/admin/mails_templates.php
View File

@ -280,7 +280,7 @@ if (empty($reshook))
elseif ($keycode == 'content') { elseif ($keycode == 'content') {
$sql .= "'".$db->escape(GETPOST($keycode, 'restricthtml'))."'"; $sql .= "'".$db->escape(GETPOST($keycode, 'restricthtml'))."'";
} }
elseif (in_array($keycode, array('joinfile', 'private', 'position', 'scale'))) { elseif (in_array($keycode, array('joinfiles', 'private', 'position', 'scale'))) {
$sql .= (int) GETPOST($keycode, 'int'); $sql .= (int) GETPOST($keycode, 'int');
} }
else { else {