lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix for #9079

Browse Source
This commit is contained in:
Laurent Destailleur 2018-07-09 15:25:14 +02:00
parent c33aaa076d
commit 8184eff66c
5 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
htdocs/admin/const.php
View File

@ -36,11 +36,11 @@ $rowid=GETPOST('rowid','int');
$entity=GETPOST('entity','int'); $entity=GETPOST('entity','int');
$action=GETPOST('action','alpha'); $action=GETPOST('action','alpha');
$update=GETPOST('update','alpha'); $update=GETPOST('update','alpha');
$delete=GETPOST('delete'); // Do not use alpha here $delete=GETPOST('delete','none'); // Do not use alpha here
$debug=GETPOST('debug','int'); $debug=GETPOST('debug','int');
$consts=GETPOST('const','array'); $consts=GETPOST('const','array');
$constname=GETPOST('constname','alpha'); $constname=GETPOST('constname','alpha');
$constvalue=GETPOST('constvalue'); $constvalue=GETPOST('constvalue','none'); // We shoul dbe able to send everything here
$constnote=GETPOST('constnote','alpha'); $constnote=GETPOST('constnote','alpha');
@ -247,7 +247,7 @@ if ($result)
while ($i < $num) while ($i < $num)
{ {
$obj = $db->fetch_object($result); $obj = $db->fetch_object($result);
print "\n"; print "\n";

2
htdocs/admin/defaultvalues.php
View File

@ -38,7 +38,7 @@ if (!$user->admin) accessforbidden();
$id=GETPOST('rowid','int'); $id=GETPOST('rowid','int');
$action=GETPOST('action','alpha'); $action=GETPOST('action','alpha');
$mode = GETPOST('mode')?GETPOST('mode'):'createform'; // 'createform', 'filters', 'sortorder', 'focus' $mode = GETPOST('mode','aZ09')?GETPOST('mode','aZ09'):'createform'; // 'createform', 'filters', 'sortorder', 'focus'
$limit = GETPOST('limit','int')?GETPOST('limit','int'):$conf->liste_limit; $limit = GETPOST('limit','int')?GETPOST('limit','int'):$conf->liste_limit;
$sortfield = GETPOST("sortfield",'alpha'); $sortfield = GETPOST("sortfield",'alpha');

2
htdocs/admin/menus/edit.php
View File

@ -89,7 +89,7 @@ if ($action == 'update')
if ($result > 0) if ($result > 0)
{ {
$menu->titre=GETPOST('titre', 'alpha'); $menu->titre=GETPOST('titre', 'alpha');
$menu->leftmenu=GETPOST('leftmenu', 'alpha'); $menu->leftmenu=GETPOST('leftmenu', 'aZ09');
$menu->url=GETPOST('url','alpha'); $menu->url=GETPOST('url','alpha');
$menu->langs=GETPOST('langs','alpha'); $menu->langs=GETPOST('langs','alpha');
$menu->position=GETPOST('position','int'); $menu->position=GETPOST('position','int');

2
htdocs/admin/system/dolibarr.php
View File

@ -157,7 +157,7 @@ $i=0;
foreach($_SESSION as $key => $val) foreach($_SESSION as $key => $val)
{ {
if ($i > 0) print ', '; if ($i > 0) print ', ';
print $key.' => '.$val; print $key.' => '.dol_escape_htmltag($val);
$i++; $i++;
} }
print '</td></tr>'."\n"; print '</td></tr>'."\n";

2
htdocs/admin/translation.php
View File

@ -39,7 +39,7 @@ $transkey=GETPOST('transkey','alpha');
$transvalue=GETPOST('transvalue','alpha'); $transvalue=GETPOST('transvalue','alpha');
$mode = GETPOST('mode')?GETPOST('mode'):'overwrite'; $mode = GETPOST('mode','aZ09')?GETPOST('mode','aZ09'):'overwrite';
$limit = GETPOST('limit','int')?GETPOST('limit','int'):$conf->liste_limit; $limit = GETPOST('limit','int')?GETPOST('limit','int'):$conf->liste_limit;
$sortfield = GETPOST("sortfield",'alpha'); $sortfield = GETPOST("sortfield",'alpha');