lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Norm: Remplacement des derniers $HTTP_POST_VARS par $_POST

Browse Source
This commit is contained in:
Laurent Destailleur 2004-09-04 12:55:30 +00:00
parent ae5f97a9eb
commit 54f066909a
23 changed files with 105 additions and 105 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
htdocs/adherents/cotisations.php
View File

@ -52,10 +52,10 @@ if ($action == 'add') {
} }
// Insertion de la cotisation dans le compte banquaire // Insertion de la cotisation dans le compte banquaire
if ($HTTP_POST_VARS["action"] == '2bank' && $HTTP_POST_VARS["rowid"] !=''){ if ($_POST["action"] == '2bank' && $_POST["rowid"] !=''){
if (defined("ADHERENT_BANK_USE") && ADHERENT_BANK_USE !=0){ if (defined("ADHERENT_BANK_USE") && ADHERENT_BANK_USE !=0){
$dateop=strftime("%Y%m%d",time()); $dateop=strftime("%Y%m%d",time());
$sql="SELECT cotisation FROM ".MAIN_DB_PREFIX."cotisation WHERE rowid=".$HTTP_POST_VARS["rowid"]." "; $sql="SELECT cotisation FROM ".MAIN_DB_PREFIX."cotisation WHERE rowid=".$_POST["rowid"]." ";
$result = $db->query($sql); $result = $db->query($sql);
if ($result) if ($result)
{ {
@ -65,7 +65,7 @@ if ($HTTP_POST_VARS["action"] == '2bank' && $HTTP_POST_VARS["rowid"] !=''){
$objp = $db->fetch_object(0); $objp = $db->fetch_object(0);
$amount=$objp->cotisation; $amount=$objp->cotisation;
$acct=new Account($db,ADHERENT_BANK_ACCOUNT); $acct=new Account($db,ADHERENT_BANK_ACCOUNT);
$insertid=$acct->addline($dateop, $HTTP_POST_VARS["operation"], $HTTP_POST_VARS["label"], $amount, $HTTP_POST_VARS["num_chq"],ADHERENT_BANK_CATEGORIE); $insertid=$acct->addline($dateop, $_POST["operation"], $_POST["label"], $amount, $_POST["num_chq"],ADHERENT_BANK_CATEGORIE);
if ($insertid == '') if ($insertid == '')
{ {
print "<p> Probleme d'insertion : ".$db->error(); print "<p> Probleme d'insertion : ".$db->error();
@ -73,7 +73,7 @@ if ($HTTP_POST_VARS["action"] == '2bank' && $HTTP_POST_VARS["rowid"] !=''){
else else
{ {
// met a jour la table cotisation // met a jour la table cotisation
$sql="UPDATE ".MAIN_DB_PREFIX."cotisation SET fk_bank=$insertid WHERE rowid=".$HTTP_POST_VARS["rowid"]." "; $sql="UPDATE ".MAIN_DB_PREFIX."cotisation SET fk_bank=$insertid WHERE rowid=".$_POST["rowid"]." ";
$result = $db->query($sql); $result = $db->query($sql);
if ($result) if ($result)
{ {

16
htdocs/admin/ldap.php
View File

@ -41,29 +41,29 @@ if ($_GET["action"] == 'setvalue' && $user->admin)
$sql = "delete from ".MAIN_DB_PREFIX."const where name = 'LDAP_SERVER_HOST';"; $sql = "delete from ".MAIN_DB_PREFIX."const where name = 'LDAP_SERVER_HOST';";
$db->query($sql);$sql=''; $db->query($sql);$sql='';
$sql = "insert into ".MAIN_DB_PREFIX."const (name,value,visible) VALUES $sql = "insert into ".MAIN_DB_PREFIX."const (name,value,visible) VALUES
('LDAP_SERVER_HOST','".$HTTP_POST_VARS["host"]."',0);"; ('LDAP_SERVER_HOST','".$_POST["host"]."',0);";
//$sql = "REPLACE INTO ".MAIN_DB_PREFIX."const SET name = 'LDAP_SERVER_HOST', value='".$HTTP_POST_VARS["host"]."', visible=0"; //$sql = "REPLACE INTO ".MAIN_DB_PREFIX."const SET name = 'LDAP_SERVER_HOST', value='".$_POST["host"]."', visible=0";
$db->query($sql); $db->query($sql);
//$sql = "REPLACE INTO ".MAIN_DB_PREFIX."const SET name = 'LDAP_SERVER_DN', value='".$HTTP_POST_VARS["dn"]."', visible=0"; //$sql = "REPLACE INTO ".MAIN_DB_PREFIX."const SET name = 'LDAP_SERVER_DN', value='".$_POST["dn"]."', visible=0";
$sql = "delete from ".MAIN_DB_PREFIX."const where name = 'LDAP_SERVER_DN';"; $sql = "delete from ".MAIN_DB_PREFIX."const where name = 'LDAP_SERVER_DN';";
$db->query($sql);$sql=''; $db->query($sql);$sql='';
$sql = "insert into ".MAIN_DB_PREFIX."const (name,value,visible) VALUES $sql = "insert into ".MAIN_DB_PREFIX."const (name,value,visible) VALUES
('LDAP_SERVER_DN','".$HTTP_POST_VARS["dn"]."',0);"; ('LDAP_SERVER_DN','".$_POST["dn"]."',0);";
$db->query($sql); $db->query($sql);
$sql = "delete from ".MAIN_DB_PREFIX."const where name = 'LDAP_SERVER_PASS';"; $sql = "delete from ".MAIN_DB_PREFIX."const where name = 'LDAP_SERVER_PASS';";
$db->query($sql);$sql=''; $db->query($sql);$sql='';
$sql = "insert into ".MAIN_DB_PREFIX."const (name,value,visible) VALUES $sql = "insert into ".MAIN_DB_PREFIX."const (name,value,visible) VALUES
('LDAP_SERVER_PASS','".$HTTP_POST_VARS["pass"]."',0);"; ('LDAP_SERVER_PASS','".$_POST["pass"]."',0);";
//$sql = "REPLACE INTO ".MAIN_DB_PREFIX."const SET name = 'LDAP_SERVER_PASS', value='".$HTTP_POST_VARS["pass"]."', visible=0"; //$sql = "REPLACE INTO ".MAIN_DB_PREFIX."const SET name = 'LDAP_SERVER_PASS', value='".$_POST["pass"]."', visible=0";
$db->query($sql); $db->query($sql);
//$sql = "REPLACE INTO ".MAIN_DB_PREFIX."const SET name = 'LDAP_SERVER_TYPE', value='".$HTTP_POST_VARS["type"]."', visible=0"; //$sql = "REPLACE INTO ".MAIN_DB_PREFIX."const SET name = 'LDAP_SERVER_TYPE', value='".$_POST["type"]."', visible=0";
$sql = "delete from ".MAIN_DB_PREFIX."const where name = 'LDAP_SERVER_TYPE';"; $sql = "delete from ".MAIN_DB_PREFIX."const where name = 'LDAP_SERVER_TYPE';";
$db->query($sql);$sql=''; $db->query($sql);$sql='';
$sql = "insert into ".MAIN_DB_PREFIX."const (name,value,visible) VALUES $sql = "insert into ".MAIN_DB_PREFIX."const (name,value,visible) VALUES
('LDAP_SERVER_TYPE','".$HTTP_POST_VARS["type"]."',0);"; ('LDAP_SERVER_TYPE','".$_POST["type"]."',0);";
$db->query($sql); $db->query($sql);

2
htdocs/admin/system/gen-commande.php
View File

@ -73,7 +73,7 @@ $com = new Commande($db);
$com->soc_id = 4; $com->soc_id = 4;
$com->date_commande = $dates[rand(1, sizeof($dates)-1)]; $com->date_commande = $dates[rand(1, sizeof($dates)-1)];
$com->note = $HTTP_POST_VARS["note"]; $com->note = $_POST["note"];
$com->source = 1; $com->source = 1;
$com->projetid = 0; $com->projetid = 0;
$com->remise_percent = 0; $com->remise_percent = 0;

2
htdocs/admin/system/gendata.php
View File

@ -249,7 +249,7 @@ if ($_GET["action"] == 'commande')
$com->soc_id = 4; $com->soc_id = 4;
$com->date_commande = $dates[rand(1, sizeof($dates)-1)]; $com->date_commande = $dates[rand(1, sizeof($dates)-1)];
$com->note = $HTTP_POST_VARS["note"]; $com->note = $_POST["note"];
$com->source = 1; $com->source = 1;
$com->projetid = 0; $com->projetid = 0;
$com->remise_percent = 0; $com->remise_percent = 0;

2
htdocs/boutique/auteur/fiche.php
View File

@ -37,7 +37,7 @@ if ($action == 'addga') {
$auteur->linkga($id, $ga); $auteur->linkga($id, $ga);
} }
if ($HTTP_POST_VARS["action"] == 'confirm_delete' && $HTTP_POST_VARS["confirm"] == yes) if ($_POST["action"] == 'confirm_delete' && $_POST["confirm"] == yes)
{ {
$auteur = new Auteur($db); $auteur = new Auteur($db);
$result = $auteur->fetch($id); $result = $auteur->fetch($id);

2
htdocs/boutique/editeur/fiche.php
View File

@ -46,7 +46,7 @@ if ($action == 'update' && !$cancel)
$editeur->update($id, $user); $editeur->update($id, $user);
} }
if ($HTTP_POST_VARS["action"] == 'confirm_delete' && $HTTP_POST_VARS["confirm"] == yes) if ($_POST["action"] == 'confirm_delete' && $_POST["confirm"] == yes)
{ {
$editeur = new Editeur($db); $editeur = new Editeur($db);
$result = $editeur->fetch($id); $result = $editeur->fetch($id);

8
htdocs/boutique/livre/fiche.php
View File

@ -23,7 +23,7 @@
require("./pre.inc.php"); require("./pre.inc.php");
if ( $HTTP_POST_VARS["sendit"] ) if ( $_POST["sendit"] )
{ {
global $local_file, $error_msg; global $local_file, $error_msg;
@ -70,7 +70,7 @@ if ($action == 'add')
$livre->annee = $annee; $livre->annee = $annee;
$livre->editeurid = $editeurid; $livre->editeurid = $editeurid;
$livre->description = $desc; $livre->description = $desc;
$livre->frais_de_port = $HTTP_POST_VARS["fdp"]; $livre->frais_de_port = $_POST["fdp"];
$id = $livre->create($user); $id = $livre->create($user);
} }
@ -81,7 +81,7 @@ if ($action == 'addga')
$livre->linkga($id, $coauteurid); $livre->linkga($id, $coauteurid);
} }
if ($HTTP_POST_VARS["action"] == 'confirm_delete' && $HTTP_POST_VARS["confirm"] == "yes") if ($_POST["action"] == 'confirm_delete' && $_POST["confirm"] == "yes")
{ {
$livre = new Livre($db); $livre = new Livre($db);
$livre->fetch($id); $livre->fetch($id);
@ -128,7 +128,7 @@ if ($action == 'update' && !$cancel)
$livre->titre = $titre; $livre->titre = $titre;
$livre->ref = $ref; $livre->ref = $ref;
$livre->price = $price; $livre->price = $price;
$livre->frais_de_port = $HTTP_POST_VARS["fdp"]; $livre->frais_de_port = $_POST["fdp"];
$livre->annee = $annee; $livre->annee = $annee;
$livre->editeurid = $editeurid; $livre->editeurid = $editeurid;
$livre->description = $desc; $livre->description = $desc;

26
htdocs/boutique/newsletter/fiche.php
View File

@ -26,11 +26,11 @@ require("./pre.inc.php");
if ($action == 'add') { if ($action == 'add') {
$newsletter = new Newsletter($db); $newsletter = new Newsletter($db);
$newsletter->email_subject = $HTTP_POST_VARS["email_subject"]; $newsletter->email_subject = $_POST["email_subject"];
$newsletter->email_from_name = $HTTP_POST_VARS["email_from_name"]; $newsletter->email_from_name = $_POST["email_from_name"];
$newsletter->email_from_email = $HTTP_POST_VARS["email_from_email"]; $newsletter->email_from_email = $_POST["email_from_email"];
$newsletter->email_replyto = $HTTP_POST_VARS["email_replyto"]; $newsletter->email_replyto = $_POST["email_replyto"];
$newsletter->email_body = $HTTP_POST_VARS["email_body"]; $newsletter->email_body = $_POST["email_body"];
$id = $newsletter->create($user); $id = $newsletter->create($user);
} }
@ -45,16 +45,16 @@ if ($action == 'update' && !$cancel)
{ {
$newsletter = new Newsletter($db); $newsletter = new Newsletter($db);
$newsletter->email_subject = $HTTP_POST_VARS["email_subject"]; $newsletter->email_subject = $_POST["email_subject"];
$newsletter->email_from_name = $HTTP_POST_VARS["email_from_name"]; $newsletter->email_from_name = $_POST["email_from_name"];
$newsletter->email_from_email = $HTTP_POST_VARS["email_from_email"]; $newsletter->email_from_email = $_POST["email_from_email"];
$newsletter->email_replyto = $HTTP_POST_VARS["email_replyto"]; $newsletter->email_replyto = $_POST["email_replyto"];
$newsletter->email_body = $HTTP_POST_VARS["email_body"]; $newsletter->email_body = $_POST["email_body"];
$newsletter->update($id, $user); $newsletter->update($id, $user);
} }
if ($HTTP_POST_VARS["action"] == 'confirm_delete' && $HTTP_POST_VARS["confirm"] == yes) if ($_POST["action"] == 'confirm_delete' && $_POST["confirm"] == yes)
{ {
$newsletter = new Newsletter($db); $newsletter = new Newsletter($db);
$result = $newsletter->fetch($id); $result = $newsletter->fetch($id);
@ -62,14 +62,14 @@ if ($HTTP_POST_VARS["action"] == 'confirm_delete' && $HTTP_POST_VARS["confirm"]
Header("Location: index.php"); Header("Location: index.php");
} }
if ($HTTP_POST_VARS["action"] == 'confirm_valid' && $HTTP_POST_VARS["confirm"] == yes) if ($_POST["action"] == 'confirm_valid' && $_POST["confirm"] == yes)
{ {
$newsletter = new Newsletter($db); $newsletter = new Newsletter($db);
$result = $newsletter->fetch($id); $result = $newsletter->fetch($id);
$newsletter->validate($user); $newsletter->validate($user);
} }
if ($HTTP_POST_VARS["action"] == 'confirm_send' && $HTTP_POST_VARS["confirm"] == yes) if ($_POST["action"] == 'confirm_send' && $_POST["confirm"] == yes)
{ {
$newsletter = new Newsletter($db); $newsletter = new Newsletter($db);
$result = $newsletter->fetch($id); $result = $newsletter->fetch($id);

2
htdocs/comm/propal/document.php
View File

@ -77,7 +77,7 @@ if ($id > 0)
dol_delete_file($file); dol_delete_file($file);
} }
if ( $HTTP_POST_VARS["sendit"] ) if ( $_POST["sendit"] )
{ {
do_upload ($upload_dir); do_upload ($upload_dir);
} }

6
htdocs/compta/dons/edit.php
View File

@ -31,10 +31,10 @@ if ($action == 'update')
$don = new Don($db); $don = new Don($db);
$don->id = $HTTP_POST_VARS["rowid"]; $don->id = $_POST["rowid"];
$don->prenom = $prenom; $don->prenom = $prenom;
$don->nom = $nom; $don->nom = $nom;
$don->statut = $HTTP_POST_VARS["statutid"]; $don->statut = $_POST["statutid"];
$don->societe = $societe; $don->societe = $societe;
$don->adresse = $adresse; $don->adresse = $adresse;
$don->amount = $amount; $don->amount = $amount;
@ -46,7 +46,7 @@ if ($action == 'update')
$don->pays = $pays; $don->pays = $pays;
$don->public = $public; $don->public = $public;
$don->projetid = $projetid; $don->projetid = $projetid;
$don->commentaire = $HTTP_POST_VARS["comment"]; $don->commentaire = $_POST["comment"];
$don->modepaiementid = $modepaiement; $don->modepaiementid = $modepaiement;
if ($don->update($user->id) ) if ($don->update($user->id) )

4
htdocs/compta/dons/fiche.php
View File

@ -45,7 +45,7 @@ if ($action == 'add')
$don->pays = $pays; $don->pays = $pays;
$don->public = $public; $don->public = $public;
$don->projetid = $projetid; $don->projetid = $projetid;
$don->commentaire = $HTTP_POST_VARS["comment"]; $don->commentaire = $_POST["comment"];
$don->modepaiementid = $modepaiement; $don->modepaiementid = $modepaiement;
if ($don->create($user->id) ) if ($don->create($user->id) )
@ -69,7 +69,7 @@ if ($action == 'delete')
if ($action == 'commentaire') if ($action == 'commentaire')
{ {
$don = new Don($db); $don = new Don($db);
$don->set_commentaire($rowid,$HTTP_POST_VARS["commentaire"]); $don->set_commentaire($rowid,$_POST["commentaire"]);
$action = "edit"; $action = "edit";
} }
if ($action == 'valid_promesse') if ($action == 'valid_promesse')

4
htdocs/compta/facture/fiche-rec.php
View File

@ -50,11 +50,11 @@ if ($user->societe_id > 0)
/* /*
* *
*/ */
if ($HTTP_POST_VARS["action"] == 'add') if ($_POST["action"] == 'add')
{ {
$facturerec = new FactureRec($db, $facid); $facturerec = new FactureRec($db, $facid);
$facturerec->titre = $HTTP_POST_VARS["titre"]; $facturerec->titre = $_POST["titre"];
if ($facturerec->create($user) > 0) if ($facturerec->create($user) > 0)
{ {

2
htdocs/expedition/commande.php
View File

@ -47,7 +47,7 @@ if ($user->societe_id > 0)
* *
*/ */
if ($HTTP_POST_VARS["action"] == 'confirm_cloture' && $HTTP_POST_VARS["confirm"] == yes) if ($_POST["action"] == 'confirm_cloture' && $_POST["confirm"] == yes)
{ {
$commande = new Commande($db); $commande = new Commande($db);
$commande->fetch($_GET["id"]); $commande->fetch($_GET["id"]);

4
htdocs/expedition/liste.php
View File

@ -70,9 +70,9 @@ if ($socidp)
$sql_add = " AND "; $sql_add = " AND ";
} }
if (strlen($HTTP_POST_VARS["sf_ref"]) > 0) if (strlen($_POST["sf_ref"]) > 0)
{ {
$sql .= $sql_add . " e.ref like '%".$HTTP_POST_VARS["sf_ref"] . "%'"; $sql .= $sql_add . " e.ref like '%".$_POST["sf_ref"] . "%'";
} }
$expedition = new Expedition($db); $expedition = new Expedition($db);

6
htdocs/fourn/facture/paiement.php
View File

@ -41,9 +41,9 @@ if ($action == 'add') {
$paiementfourn->facid = $facid; $paiementfourn->facid = $facid;
$paiementfourn->facnumber = $facnumber; $paiementfourn->facnumber = $facnumber;
$paiementfourn->datepaye = $db->idate(mktime(12, 0 , 0, $paiementfourn->datepaye = $db->idate(mktime(12, 0 , 0,
$HTTP_POST_VARS["remonth"], $_POST["remonth"],
$HTTP_POST_VARS["reday"], $_POST["reday"],
$HTTP_POST_VARS["reyear"])); $_POST["reyear"]));
$paiementfourn->amount = $amount; $paiementfourn->amount = $amount;
$paiementfourn->accountid = $accountid; $paiementfourn->accountid = $accountid;
$paiementfourn->societe = $societe; $paiementfourn->societe = $societe;

2
htdocs/install/etape2.php
View File

@ -45,7 +45,7 @@ else
require ($dolibarr_main_document_root . "/conf/conf.class.php");// ne sert plus require ($dolibarr_main_document_root . "/conf/conf.class.php");// ne sert plus
if ($HTTP_POST_VARS["action"] == "set") if ($_POST["action"] == "set")
{ {
print '<h2>Base de donnée</h2>'; print '<h2>Base de donnée</h2>';

12
htdocs/install/etape5.php
View File

@ -39,19 +39,19 @@ else
require ($dolibarr_main_document_root . "/conf/conf.class.php"); require ($dolibarr_main_document_root . "/conf/conf.class.php");
if ($HTTP_POST_VARS["action"] == "set") if ($_POST["action"] == "set")
{ {
if ($HTTP_POST_VARS["pass"] <> $HTTP_POST_VARS["pass_verif"]) if ($_POST["pass"] <> $_POST["pass_verif"])
{ {
Header("Location: etape4.php?error=1"); Header("Location: etape4.php?error=1");
} }
if (strlen(trim($HTTP_POST_VARS["pass"])) == 0) if (strlen(trim($_POST["pass"])) == 0)
{ {
Header("Location: etape4.php?error=2"); Header("Location: etape4.php?error=2");
} }
if (strlen(trim($HTTP_POST_VARS["login"])) == 0) if (strlen(trim($_POST["login"])) == 0)
{ {
Header("Location: etape4.php?error=3"); Header("Location: etape4.php?error=3");
} }
@ -72,8 +72,8 @@ if ($HTTP_POST_VARS["action"] == "set")
if ($db->connected == 1) if ($db->connected == 1)
{ {
$sql = "INSERT INTO llx_user(datec,login,pass,admin,name,code) VALUES (now()"; $sql = "INSERT INTO llx_user(datec,login,pass,admin,name,code) VALUES (now()";
$sql .= ",'".$HTTP_POST_VARS["login"]."'"; $sql .= ",'".$_POST["login"]."'";
$sql .= ",'".$HTTP_POST_VARS["pass"]."'"; $sql .= ",'".$_POST["pass"]."'";
$sql .= ",1,'Administrateur','ADM')"; $sql .= ",1,'Administrateur','ADM')";
} }

4
htdocs/postnuke/articles/fiche.php
View File

@ -29,8 +29,8 @@ if ($action == 'update' && !$cancel)
{ {
$article = new pnArticle($db); $article = new pnArticle($db);
$article->titre = $HTTP_POST_VARS["titre"]; $article->titre = $_POST["titre"];
$article->body = $HTTP_POST_VARS["body"]; $article->body = $_POST["body"];
if ($article->update($id, $user)) if ($article->update($id, $user))
{ {

8
htdocs/product/concert/fiche.php
View File

@ -28,8 +28,8 @@ llxHeader();
if ($action == 'add') { if ($action == 'add') {
$concert = new Concert($db); $concert = new Concert($db);
$concert->groupartid = $HTTP_POST_VARS["ga"]; $concert->groupartid = $_POST["ga"];
$concert->lieuid = $HTTP_POST_VARS["lc"]; $concert->lieuid = $_POST["lc"];
$concert->date = $db->idate(mktime(12, 0 , 0, $remonth, $reday, $reyear)); $concert->date = $db->idate(mktime(12, 0 , 0, $remonth, $reday, $reyear));
$concert->description = $desc; $concert->description = $desc;
@ -39,8 +39,8 @@ if ($action == 'add') {
if ($action == 'update') { if ($action == 'update') {
$concert = new Concert($db); $concert = new Concert($db);
$concert->groupartid = $HTTP_POST_VARS["ga"]; $concert->groupartid = $_POST["ga"];
$concert->lieuid = $HTTP_POST_VARS["lc"]; $concert->lieuid = $_POST["lc"];
$concert->date = $db->idate(mktime(12, 0 , 0, $remonth, $reday, $reyear)); $concert->date = $db->idate(mktime(12, 0 , 0, $remonth, $reday, $reyear));
$concert->description = $desc; $concert->description = $desc;

26
htdocs/public/adherents/priv_edit.php
View File

@ -74,29 +74,29 @@ if ($action == 'update')
} }
if (!$error){ if (!$error){
// email a peu pres correct et le login n'existe pas // email a peu pres correct et le login n'existe pas
$adh->id = $HTTP_POST_VARS["rowid"]; $adh->id = $_POST["rowid"];
$adh->prenom = $prenom; $adh->prenom = $prenom;
$adh->nom = $nom; $adh->nom = $nom;
$adh->societe = $societe; $adh->societe = $societe;
$adh->adresse = $adresse; $adh->adresse = $adresse;
$adh->amount = $amount; $adh->amount = $amount;
$adh->cp = $cp; $adh->cp = $cp;
$adh->ville = $HTTP_POST_VARS["ville"]; $adh->ville = $_POST["ville"];
$adh->email = $HTTP_POST_VARS["email"]; $adh->email = $_POST["email"];
// interdiction de la modif du login adherent // interdiction de la modif du login adherent
// $adh->login = $HTTP_POST_VARS["login"]; // $adh->login = $_POST["login"];
$adh->login = $adh->login; $adh->login = $adh->login;
$adh->pass = $HTTP_POST_VARS["pass"]; $adh->pass = $_POST["pass"];
$adh->naiss = $HTTP_POST_VARS["naiss"]; $adh->naiss = $_POST["naiss"];
$adh->photo = $HTTP_POST_VARS["photo"]; $adh->photo = $_POST["photo"];
$adh->date = mktime(12, 0 , 0, $remonth, $reday, $reyear); $adh->date = mktime(12, 0 , 0, $remonth, $reday, $reyear);
$adh->note = $HTTP_POST_VARS["note"]; $adh->note = $_POST["note"];
$adh->pays = $HTTP_POST_VARS["pays"]; $adh->pays = $_POST["pays"];
$adh->typeid = $HTTP_POST_VARS["type"]; $adh->typeid = $_POST["type"];
$adh->commentaire = $HTTP_POST_VARS["comment"]; $adh->commentaire = $_POST["comment"];
$adh->morphy = $HTTP_POST_VARS["morphy"]; $adh->morphy = $_POST["morphy"];
// recuperation du statut et public // recuperation du statut et public
$adh->statut = $HTTP_POST_VARS["statut"]; $adh->statut = $_POST["statut"];
if (isset($public)){ if (isset($public)){
$public=1; $public=1;
}else{ }else{

26
htdocs/public/dons/code_valid.php
View File

@ -20,19 +20,19 @@
* *
*/ */
print '<input type="hidden" name="projetid" value="'.$HTTP_POST_VARS["projetid"].'">'; print '<input type="hidden" name="projetid" value="'.$_POST["projetid"].'">';
print '<input type="hidden" name="prenom" value="'.$HTTP_POST_VARS["prenom"].'">'; print '<input type="hidden" name="prenom" value="'.$_POST["prenom"].'">';
print '<input type="hidden" name="nom" value="'.$HTTP_POST_VARS["nom"].'">'; print '<input type="hidden" name="nom" value="'.$_POST["nom"].'">';
print '<input type="hidden" name="societe" value="'.$HTTP_POST_VARS["societe"].'">'; print '<input type="hidden" name="societe" value="'.$_POST["societe"].'">';
print '<input type="hidden" name="adresse" value="'.$HTTP_POST_VARS["adresse"].'">'; print '<input type="hidden" name="adresse" value="'.$_POST["adresse"].'">';
print '<input type="hidden" name="cp" value="'.$HTTP_POST_VARS["cp"].'">'; print '<input type="hidden" name="cp" value="'.$_POST["cp"].'">';
print '<input type="hidden" name="ville" value="'.$HTTP_POST_VARS["ville"].'">'; print '<input type="hidden" name="ville" value="'.$_POST["ville"].'">';
print '<input type="hidden" name="pays" value="'.$HTTP_POST_VARS["pays"].'">'; print '<input type="hidden" name="pays" value="'.$_POST["pays"].'">';
print '<input type="hidden" name="date" value="'.$HTTP_POST_VARS["date"].'">'; print '<input type="hidden" name="date" value="'.$_POST["date"].'">';
print '<input type="hidden" name="public" value="'.$HTTP_POST_VARS["public"].'">'; print '<input type="hidden" name="public" value="'.$_POST["public"].'">';
print '<input type="hidden" name="email" value="'.$HTTP_POST_VARS["email"].'">'; print '<input type="hidden" name="email" value="'.$_POST["email"].'">';
print '<input type="hidden" name="montant" value="'.$HTTP_POST_VARS["montant"].'">'; print '<input type="hidden" name="montant" value="'.$_POST["montant"].'">';
print '<input type="hidden" name="commentaire" value="'.$HTTP_POST_VARS["commentaire"].'">'; print '<input type="hidden" name="commentaire" value="'.$_POST["commentaire"].'">';
?> ?>

28
htdocs/public/dons/index.php
View File

@ -32,26 +32,26 @@ if ($conf->don->enabled)
$db = new DoliDb(); $db = new DoliDb();
$don = new Don($db); $don = new Don($db);
$don->projetid = $HTTP_POST_VARS["projetid"]; $don->projetid = $_POST["projetid"];
$don->date = time(); $don->date = time();
$don->prenom = $HTTP_POST_VARS["prenom"]; $don->prenom = $_POST["prenom"];
$don->nom = $HTTP_POST_VARS["nom"]; $don->nom = $_POST["nom"];
$don->societe = $HTTP_POST_VARS["societe"]; $don->societe = $_POST["societe"];
$don->adresse = $HTTP_POST_VARS["adresse"]; $don->adresse = $_POST["adresse"];
$don->cp = $HTTP_POST_VARS["cp"]; $don->cp = $_POST["cp"];
$don->ville = $HTTP_POST_VARS["ville"]; $don->ville = $_POST["ville"];
$don->pays = $HTTP_POST_VARS["pays"]; $don->pays = $_POST["pays"];
$don->public = 1; $don->public = 1;
if ($HTTP_POST_VARS["public"] == "FALSE") if ($_POST["public"] == "FALSE")
{ {
$don->public = 0; $don->public = 0;
} }
$don->email = $HTTP_POST_VARS["email"]; $don->email = $_POST["email"];
$don->amount = $HTTP_POST_VARS["montant"]; $don->amount = $_POST["montant"];
$don->commentaire = $HTTP_POST_VARS["commentaire"]; $don->commentaire = $_POST["commentaire"];
if ($HTTP_POST_VARS["action"] == 'add') if ($_POST["action"] == 'add')
{ {
if ($don->check($conf->don->minimum)) if ($don->check($conf->don->minimum))
@ -63,7 +63,7 @@ if ($conf->don->enabled)
require("erreur.php"); require("erreur.php");
} }
} }
elseif ($HTTP_POST_VARS["action"] == 'valid' && $HTTP_POST_VARS["valid"] == 'Valider') elseif ($_POST["action"] == 'valid' && $_POST["valid"] == 'Valider')
{ {
if ($don->check($conf->don->minimum)) if ($don->check($conf->don->minimum))

10
htdocs/public/dons/merci_code.php
View File

@ -29,13 +29,13 @@ if ($conf->don->onlinepayment)
print "<form action=\"".$conf->bplc->url."\" method=\"post\">\n"; print "<form action=\"".$conf->bplc->url."\" method=\"post\">\n";
$cyberp->set_client($HTTP_POST_VARS["nom"], $cyberp->set_client($_POST["nom"],
$HTTP_POST_VARS["prenom"], $_POST["prenom"],
$HTTP_POST_VARS["email"], $_POST["email"],
$HTTP_POST_VARS["societe"]); $_POST["societe"]);
$cyberp->set_commande($ref_commande ."10", $cyberp->set_commande($ref_commande ."10",
$HTTP_POST_VARS["montant"]); $_POST["montant"]);
$cyberp->print_hidden(); $cyberp->print_hidden();