From 1653e171810ee136036ef01303311b2d35ffac4c Mon Sep 17 00:00:00 2001
From: Regis Houssin <regis.houssin@inodbox.com>
Date: Wed, 4 Nov 2020 10:26:45 +0100
Subject: [PATCH 1/2] FIX syntax error, missing token in url

---
 htdocs/categories/viewcat.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/htdocs/categories/viewcat.php b/htdocs/categories/viewcat.php
index 4306bc728d6..441f8454262 100644
--- a/htdocs/categories/viewcat.php
+++ b/htdocs/categories/viewcat.php
@@ -278,13 +278,13 @@ print "<div class='tabsAction'>\n";
 
 if ($user->rights->categorie->creer)
 {
-	$socid = ($object->socid ? "&amp;socid=".$object->socid : "");
-	print "<a class='butAction' href='edit.php?id=".$object->id.$socid."&amp;type=".$type."'>".$langs->trans("Modify")."</a>";
+	$socid = ($object->socid ? "&socid=".$object->socid : "");
+	print "<a class='butAction' href='edit.php?id=".$object->id.$socid."&type=".$type."'>".$langs->trans("Modify")."</a>";
 }
 
 if ($user->rights->categorie->supprimer)
 {
-	print "<a class='butActionDelete' href='".DOL_URL_ROOT."/categories/viewcat.php?action=delete&amp;token='.newToken().'&amp;id=".$object->id."&amp;type=".$type."'>".$langs->trans("Delete")."</a>";
+    print "<a class='butActionDelete' href='".$_SERVER["PHP_SELF"]."?action=delete&token=".newToken()."&id=".$object->id."&type=".$type."'>".$langs->trans("Delete")."</a>";
 }
 
 print "</div>";

From f4829e7a166730ec3e5ed164b02fcab7a5d1eca6 Mon Sep 17 00:00:00 2001
From: Laurent Destailleur <eldy@destailleur.fr>
Date: Wed, 4 Nov 2020 18:38:45 +0100
Subject: [PATCH 2/2] Update viewcat.php

---
 htdocs/categories/viewcat.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/htdocs/categories/viewcat.php b/htdocs/categories/viewcat.php
index 441f8454262..8c1eccfa846 100644
--- a/htdocs/categories/viewcat.php
+++ b/htdocs/categories/viewcat.php
@@ -279,12 +279,12 @@ print "<div class='tabsAction'>\n";
 if ($user->rights->categorie->creer)
 {
 	$socid = ($object->socid ? "&socid=".$object->socid : "");
-	print "<a class='butAction' href='edit.php?id=".$object->id.$socid."&type=".$type."'>".$langs->trans("Modify")."</a>";
+	print '<a class="butAction" href="edit.php?id='.$object->id.$socid.'&type='.$type.'">'.$langs->trans("Modify").'</a>';
 }
 
 if ($user->rights->categorie->supprimer)
 {
-    print "<a class='butActionDelete' href='".$_SERVER["PHP_SELF"]."?action=delete&token=".newToken()."&id=".$object->id."&type=".$type."'>".$langs->trans("Delete")."</a>";
+    print '<a class="butActionDelete" href="'.$_SERVER["PHP_SELF"].'?action=delete&token='.newToken().'&id='.$object->id.'&type='.$type.'">'.$langs->trans("Delete").'</a>';
 }
 
 print "</div>";