lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: XSS injection

Browse Source
This commit is contained in:
Regis Houssin 2010-11-10 21:07:04 +00:00
parent bc286f23c6
commit 5807db9a22
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
htdocs/commande/liste.php
View File

@ -35,15 +35,15 @@ $langs->load('orders');
$langs->load('deliveries'); $langs->load('deliveries');
$langs->load('companies'); $langs->load('companies');
$orderyear=isset($_GET["orderyear"])?$_GET["orderyear"]:$_POST["orderyear"]; $orderyear=GETPOST("orderyear","int");
$ordermonth=isset($_GET["ordermonth"])?$_GET["ordermonth"]:$_POST["ordermonth"]; $ordermonth=GETPOST("ordermonth","int");
$deliveryyear=isset($_GET["deliveryyear"])?$_GET["deliveryyear"]:$_POST["deliveryyear"]; $deliveryyear=GETPOST("deliveryyear","int");
$deliverymonth=isset($_GET["deliverymonth"])?$_GET["deliverymonth"]:$_POST["deliverymonth"]; $deliverymonth=GETPOST("deliverymonth","int");
$sref=isset($_GET['sref'])?$_GET['sref']:$_POST['sref']; $sref=GETPOST('sref');
$sref_client=isset($_GET['sref_client'])?$_GET['sref_client']:(isset($_POST['sref_client'])?$_POST['sref_client']:''); $sref_client=GETPOST('sref_client');
$snom=isset($_GET['snom'])?$_GET['snom']:$_POST['snom']; $snom=GETPOST('snom');
$sall=isset($_GET['sall'])?$_GET['sall']:$_POST['sall']; $sall=GETPOST('sall');
$socid=isset($_GET['socid'])?$_GET['socid']:$_POST['socid']; $socid=GETPOST('socid','int');
// Security check // Security check
$orderid = isset($_GET["orderid"])?$_GET["orderid"]:''; $orderid = isset($_GET["orderid"])?$_GET["orderid"]:'';