From 826973ad8952e3027a4357ef5229548e62736976 Mon Sep 17 00:00:00 2001 From: Regis Houssin Date: Mon, 19 Dec 2005 22:42:52 +0000 Subject: [PATCH] Fix: gestion des apostrophes --- htdocs/compta/bank/account.class.php | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/htdocs/compta/bank/account.class.php b/htdocs/compta/bank/account.class.php index 0144ec9bb32..b192d000d41 100644 --- a/htdocs/compta/bank/account.class.php +++ b/htdocs/compta/bank/account.class.php @@ -313,8 +313,8 @@ class Account $sql = "UPDATE ".MAIN_DB_PREFIX."bank_account SET "; - $sql .= " bank = '" .$this->bank ."'"; - $sql .= ",label = '".$this->label ."'"; + $sql .= " bank = '" .addslashes($this->bank)."'"; + $sql .= ",label = '".addslashes($this->label)."'"; $sql .= ",code_banque='".$this->code_banque."'"; $sql .= ",code_guichet='".$this->code_guichet."'"; @@ -323,8 +323,8 @@ class Account $sql .= ",bic='".$this->bic."'"; $sql .= ",iban_prefix = '".$this->iban_prefix."'"; $sql .= ",domiciliation='".addslashes($this->domiciliation)."'"; - $sql .= ",proprio = '".$this->proprio."'"; - $sql .= ",adresse_proprio = '".$this->adresse_proprio."'"; + $sql .= ",proprio = '".addslashes($this->proprio)."'"; + $sql .= ",adresse_proprio = '".addslashes($this->adresse_proprio)."'"; $sql .= ",courant = ".$this->courant; $sql .= ",clos = ".$this->clos; $sql .= ",rappro = ".$this->rappro;