lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add escape

Browse Source
This commit is contained in:
jpb 2022-09-21 16:11:18 +02:00
parent 8f29d5c0eb
commit 64c92cc66d
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
htdocs/mrp/tpl/linkedobjectblock.tpl.php
View File

@ -65,8 +65,8 @@ foreach ($TMoChilds as $key => $objectlink) {
echo '<td class="linkedcol-action right">'; echo '<td class="linkedcol-action right">';
// we want to make the link via element_element for delete action // we want to make the link via element_element for delete action
$sql = ' Select rowid from ' . MAIN_DB_PREFIX . 'element_element'; $sql = " Select rowid from " . MAIN_DB_PREFIX . "element_element";
$sql .= ' WHERE fk_source = '. (int) $object->id . ' and fk_target = "' . $key .'"'; $sql .= " WHERE fk_source = ". (int) $object->id . " and fk_target = '" . dol_escape_htmltag($key) ."'";
$resql = $db->query($sql); $resql = $db->query($sql);
$k = 0; $k = 0;