lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

FIX GETPOST on 'action' (backport)

Browse Source
This commit is contained in:
Alexandre SPANGARO 2020-09-16 21:50:30 +02:00
parent 6928b6543c
commit 8a84b245ca
132 changed files with 142 additions and 142 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/accountancy/bookkeeping/listbyaccount.php
View File

@ -40,7 +40,7 @@ $langs->loadLangs(array("accountancy"));
$page = GETPOST("page");
$sortorder = GETPOST("sortorder");
$sortfield = GETPOST("sortfield");
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$search_date_start = dol_mktime(0, 0, 0, GETPOST('search_date_startmonth', 'int'), GETPOST('search_date_startday', 'int'), GETPOST('search_date_startyear', 'int'));
$search_date_end = dol_mktime(0, 0, 0, GETPOST('search_date_endmonth', 'int'), GETPOST('search_date_endday', 'int'), GETPOST('search_date_endyear', 'int'));
$search_doc_date = dol_mktime(0, 0, 0, GETPOST('doc_datemonth', 'int'), GETPOST('doc_dateday', 'int'), GETPOST('doc_dateyear', 'int'));

2
htdocs/accountancy/customer/card.php
View File

@ -30,7 +30,7 @@ require_once DOL_DOCUMENT_ROOT . '/core/class/html.formaccounting.class.php';
// Load translation files required by the page
$langs->loadLangs(array("bills","accountancy"));
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$cancel = GETPOST('cancel', 'alpha');
$backtopage = GETPOST('backtopage', 'alpha');

2
htdocs/accountancy/expensereport/card.php
View File

@ -34,7 +34,7 @@ require_once DOL_DOCUMENT_ROOT . '/core/class/html.formaccounting.class.php';
// Load translation files required by the page
$langs->loadLangs(array("bills","accountancy","trips"));
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$cancel = GETPOST('cancel', 'alpha');
$backtopage = GETPOST('backtopage', 'alpha');

2
htdocs/accountancy/supplier/card.php
View File

@ -34,7 +34,7 @@ require_once DOL_DOCUMENT_ROOT . '/core/class/html.formaccounting.class.php';
// Load translation files required by the page
$langs->loadLangs(array("bills","accountancy"));
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$cancel = GETPOST('cancel', 'alpha');
$backtopage = GETPOST('backtopage', 'alpha');

2
htdocs/adherents/admin/adherent.php
View File

@ -41,7 +41,7 @@ if (! $user->admin) accessforbidden();
$type=array('yesno','texte','chaine');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
/*

2
htdocs/adherents/admin/adherent_emails.php
View File

@ -41,7 +41,7 @@ if (! $user->admin) accessforbidden();
$oldtypetonewone=array('texte'=>'text','chaine'=>'string'); // old type to new ones
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$error = 0;

2
htdocs/adherents/type.php
View File

@ -36,7 +36,7 @@ require_once DOL_DOCUMENT_ROOT.'/core/class/extrafields.class.php';
$langs->load("members");
$rowid = GETPOST('rowid', 'int');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$cancel = GETPOST('cancel', 'alpha');
$backtopage = GETPOST('backtopage', 'alpha');

2
htdocs/adherents/type_ldap.php
View File

@ -33,7 +33,7 @@ require_once DOL_DOCUMENT_ROOT.'/core/lib/ldap.lib.php';
$langs->loadLangs(array("admin","members","ldap"));
$id = GETPOST('rowid', 'int');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
// Security check
$result=restrictedArea($user, 'adherent', $id, 'adherent_type');

2
htdocs/admin/agenda.php
View File

@ -34,7 +34,7 @@ if (!$user->admin)
// Load translation files required by the page
$langs->loadLangs(array('admin', 'other', 'agenda'));
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$cancel = GETPOST('cancel', 'alpha');
$search_event = GETPOST('search_event', 'alpha');

2
htdocs/admin/agenda_other.php
View File

@ -37,7 +37,7 @@ if (!$user->admin)
// Load translation files required by the page
$langs->loadLangs(array('admin', 'other', 'agenda', 'users'));
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$param = GETPOST('param', 'alpha');
$cancel = GETPOST('cancel', 'alpha');

2
htdocs/admin/agenda_reminder.php
View File

@ -32,7 +32,7 @@ if (!$user->admin)
// Load translation files required by the page
$langs->loadLangs(array("admin","other","agenda"));
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$param = GETPOST('param', 'alpha');
$cancel = GETPOST('cancel', 'alpha');

2
htdocs/admin/bank.php
View File

@ -37,7 +37,7 @@ $langs->loadLangs(array("admin","companies","bills","other","banks"));
if (!$user->admin)
accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/admin/barcode.php
View File

@ -33,7 +33,7 @@ $langs->load("admin");
if (!$user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
/*

2
htdocs/admin/bom.php
View File

@ -32,7 +32,7 @@ $langs->loadLangs(array('admin', 'errors', 'mrp', 'other'));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/admin/boxes.php
View File

@ -34,7 +34,7 @@ $langs->loadLangs(array('admin', 'boxes'));
if (! $user->admin) accessforbidden();
$rowid = GETPOST('rowid', 'int');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
// Define possible position of boxes

2
htdocs/admin/chequereceipts.php
View File

@ -37,7 +37,7 @@ $langs->loadLangs(array("admin","companies","bills","other","banks"));
if (!$user->admin)
accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');

2
htdocs/admin/commande.php
View File

@ -41,7 +41,7 @@ $langs->loadLangs(array('admin', 'errors', 'orders', 'other'));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/admin/compta.php
View File

@ -35,7 +35,7 @@ $langs->loadLangs(array('admin', 'compta', 'accountancy'));
if (!$user->admin)
accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
// Other parameters ACCOUNTING_*
$list = array(

2
htdocs/admin/contract.php
View File

@ -33,7 +33,7 @@ $langs->loadLangs(array("admin","errors","contracts"));
if (!$user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/admin/dav.php
View File

@ -32,7 +32,7 @@ if (!$user->admin)
accessforbidden();
// Parameters
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtopage = GETPOST('backtopage', 'alpha');
$arrayofparameters=array(

2
htdocs/admin/expensereport.php
View File

@ -39,7 +39,7 @@ $langs->loadLangs(array('admin', 'errors', 'trips', 'other'));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/admin/expensereport_ik.php
View File

@ -39,7 +39,7 @@ if (!$user->admin) accessforbidden();
$error = false;
$message = false;
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$id = GETPOST('id', 'int');
$offset = GETPOST('offset', 'int');
$coef = GETPOST('coef', 'int');

2
htdocs/admin/expensereport_rules.php
View File

@ -40,7 +40,7 @@ if (!$user->admin) accessforbidden();
$error = false;
$message = false;
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$id = GETPOST('id', 'int');
$apply_to = GETPOST('apply_to');

2
htdocs/admin/facture.php
View File

@ -38,7 +38,7 @@ $langs->loadLangs(array('admin', 'errors', 'other', 'bills'));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/admin/fckeditor.php
View File

@ -31,7 +31,7 @@ require_once DOL_DOCUMENT_ROOT.'/core/class/doleditor.class.php';
// Load translation files required by the page
$langs->loadLangs(array('admin', 'fckeditor'));
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
// Possible modes are:
// dolibarr_details
// dolibarr_notes

2
htdocs/admin/fichinter.php
View File

@ -39,7 +39,7 @@ $langs->loadLangs(array('admin', 'errors', 'interventions', 'other'));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/admin/holiday.php
View File

@ -35,7 +35,7 @@ $langs->loadLangs(array("admin", "errors", "holiday"));
if (!$user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/admin/limits.php
View File

@ -31,7 +31,7 @@ $langs->loadLangs(array('companies', 'products', 'admin'));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
if ($action == 'update')
{

2
htdocs/admin/loan.php
View File

@ -35,7 +35,7 @@ $langs->loadLangs(array('admin', 'loan'));
if (!$user->admin)
accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
// Other parameters LOAN_*
$list = array (

2
htdocs/admin/mailing.php
View File

@ -32,7 +32,7 @@ $langs->loadLangs(array("admin", "mails"));
if (!$user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');

2
htdocs/admin/multicurrency.php
View File

@ -38,7 +38,7 @@ if (! $user->admin) {
}
// Parameters
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
/*

2
htdocs/admin/oauth.php
View File

@ -40,7 +40,7 @@ $langs->loadLangs(array('admin', 'oauth'));
if (!$user->admin)
accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
/*

2
htdocs/admin/oauthlogintokens.php
View File

@ -33,7 +33,7 @@ $langs->loadLangs(array('admin', 'printing', 'oauth'));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$mode = GETPOST('mode', 'alpha');
$value = GETPOST('value', 'alpha');
$varname = GETPOST('varname', 'alpha');

2
htdocs/admin/payment.php
View File

@ -31,7 +31,7 @@ $langs->loadLangs(array("admin", "other", "errors", "bills"));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/admin/pdf.php
View File

@ -37,7 +37,7 @@ $langs->loadLangs(array('admin', 'languages', 'other', 'companies', 'products',
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$cancel = GETPOST('cancel', 'alpha');

2
htdocs/admin/prelevement.php
View File

@ -36,7 +36,7 @@ $langs->loadLangs(array("admin","withdrawals"));
// Security check
if (!$user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$type = 'paymentorder';

2
htdocs/admin/propal.php
View File

@ -39,7 +39,7 @@ $langs->loadLangs(array("admin", "other", "errors", "propal"));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/admin/receiptprinter.php
View File

@ -35,7 +35,7 @@ $langs->loadLangs(array("admin","receiptprinter"));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$mode = GETPOST('mode', 'alpha');
$printername = GETPOST('printername', 'alpha');

2
htdocs/admin/resource.php
View File

@ -37,7 +37,7 @@ $langs->loadLangs(array("admin","resource"));
if (!$user->admin)
accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
/*

2
htdocs/admin/salaries.php
View File

@ -35,7 +35,7 @@ $langs->loadLangs(array('admin', 'salaries'));
if (!$user->admin)
accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
// Other parameters SALARIES_*
$list = array (

2
htdocs/admin/stock.php
View File

@ -34,7 +34,7 @@ $langs->loadLangs(array("admin", "stocks"));
// Securit check
if (!$user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
/*

2
htdocs/admin/supplier_payment.php
View File

@ -32,7 +32,7 @@ $langs->loadLangs(array("admin", "errors", "other", "bills", "orders"));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/admin/supplier_proposal.php
View File

@ -34,7 +34,7 @@ $langs->loadLangs(array("admin", "errors", "other", "supplier_proposal"));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/admin/taxes.php
View File

@ -34,7 +34,7 @@ $langs->loadLangs(array('admin', 'objects', 'companies', 'products'));
if (!$user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');

2
htdocs/admin/ticket.php
View File

@ -37,7 +37,7 @@ if (!$user->admin) {
// Parameters
$value = GETPOST('value', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scandir', 'alpha');
$type = 'ticket';

2
htdocs/admin/ticket_extrafields.php
View File

@ -39,7 +39,7 @@ foreach ($tmptype2label as $key => $val) {
$type2label[$key] = $langs->trans($val);
}
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$attrname = GETPOST('attrname', 'alpha');
$elementtype = 'ticket'; //Must be the $table_element of the class that manage extrafield

2
htdocs/admin/ticket_public.php
View File

@ -37,7 +37,7 @@ if (!$user->admin) {
// Parameters
$value = GETPOST('value', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scandir', 'alpha');
$type = 'ticket';

2
htdocs/admin/user.php
View File

@ -38,7 +38,7 @@ if (! $user->admin) accessforbidden();
$extrafields = new ExtraFields($db);
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtopage = GETPOST('backtopage', 'alpha');
$value = GETPOST('value', 'alpha');

2
htdocs/admin/usergroup.php
View File

@ -39,7 +39,7 @@ if (! $user->admin) accessforbidden();
$extrafields = new ExtraFields($db);
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value', 'alpha');
$type='group';

2
htdocs/admin/workflow.php
View File

@ -32,7 +32,7 @@ $langs->loadLangs(array("admin","workflow","propal","workflow","orders","supplie
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
/*

2
htdocs/asset/admin/setup.php
View File

@ -35,7 +35,7 @@ $langs->loadLangs(array("admin", "assets"));
if (! $user->admin) accessforbidden();
// Parameters
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtopage = GETPOST('backtopage', 'alpha');
$arrayofparameters=array('FIXEDASSETS_MYPARAM1'=>array('css'=>'minwidth200'), 'FIXEDASSETS_MYPARAM2'=>array('css'=>'minwidth500'));

2
htdocs/asset/type.php
View File

@ -34,7 +34,7 @@ if (! empty($conf->accounting->enabled)) require_once DOL_DOCUMENT_ROOT.'/accoun
$langs->load("assets");
$rowid = GETPOST('rowid', 'int');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$cancel = GETPOST('cancel', 'alpha');
$backtopage = GETPOST('backtopage', 'alpha');

2
htdocs/blockedlog/admin/blockedlog.php
View File

@ -32,7 +32,7 @@ $langs->loadLangs(array("admin","other","blockedlog"));
if (! $user->admin || empty($conf->blockedlog->enabled)) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtopage = GETPOST('backtopage', 'alpha');

2
htdocs/blockedlog/admin/blockedlog_list.php
View File

@ -35,7 +35,7 @@ $langs->loadLangs(array("admin", "other", "blockedlog", "bills"));
if ((! $user->admin && ! $user->rights->blockedlog->read) || empty($conf->blockedlog->enabled)) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$contextpage= GETPOST('contextpage', 'aZ')?GETPOST('contextpage', 'aZ'):'blockedloglist'; // To manage different context of search
$backtopage = GETPOST('backtopage', 'alpha'); // Go back to a dedicated page
$optioncss = GETPOST('optioncss', 'aZ'); // Option for the css output (always '' except when 'print')

2
htdocs/blockedlog/ajax/block-add.php
View File

@ -34,7 +34,7 @@ $res=require '../../main.inc.php';
$id = GETPOST('id', 'int');
$element = GETPOST('element', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
if ($element === 'facture') {
require_once DOL_DOCUMENT_ROOT.'/blockedlog/class/blockedlog.class.php';

2
htdocs/bom/admin/setup.php
View File

@ -37,7 +37,7 @@ $langs->loadLangs(array("admin", "mrp"));
if (! $user->admin) accessforbidden();
// Parameters
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtopage = GETPOST('backtopage', 'alpha');
$arrayofparameters=array(

2
htdocs/cashdesk/facturation_verif.php
View File

@ -29,7 +29,7 @@ require_once DOL_DOCUMENT_ROOT.'/cashdesk/class/Facturation.class.php';
require_once DOL_DOCUMENT_ROOT.'/societe/class/societe.class.php';
require_once DOL_DOCUMENT_ROOT.'/product/class/product.class.php';
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$obj_facturation = unserialize($_SESSION['serObjFacturation']);
unset($_SESSION['serObjFacturation']);

2
htdocs/categories/traduction.php
View File

@ -37,7 +37,7 @@ $langs->loadLangs(array('categories', 'languages'));
$id = GETPOST('id', 'int');
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$cancel = GETPOST('cancel', 'alpha');
$type = GETPOST('type', 'aZ09');

2
htdocs/comm/propal/card.php
View File

@ -68,7 +68,7 @@ $error = 0;
$id = GETPOST('id', 'int');
$ref = GETPOST('ref', 'alpha');
$socid = GETPOST('socid', 'int');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$cancel = GETPOST('cancel', 'alpha');
$origin = GETPOST('origin', 'alpha');
$originid = GETPOST('originid', 'int');

2
htdocs/commande/card.php
View File

@ -66,7 +66,7 @@ if (! empty($conf->productbatch->enabled)) $langs->load("productbatch");
$id = (GETPOST('id', 'int') ? GETPOST('id', 'int') : GETPOST('orderid', 'int'));
$ref = GETPOST('ref', 'alpha');
$socid = GETPOST('socid', 'int');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$cancel = GETPOST('cancel', 'alpha');
$confirm = GETPOST('confirm', 'alpha');
$lineid = GETPOST('lineid', 'int');

2
htdocs/compta/bank/document.php
View File

@ -36,7 +36,7 @@ $langs->loadLangs(array('banks', 'companies', 'other'));
$id = (GETPOST('id', 'int') ? GETPOST('id', 'int') : GETPOST('account', 'int'));
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
$mesg = '';

2
htdocs/compta/bank/transfer.php
View File

@ -37,7 +37,7 @@ $langs->loadLangs(array("banks", "categories", "multicurrency"));
if (! $user->rights->banque->transfer)
accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$error = 0;

2
htdocs/compta/bank/various_payment/document.php
View File

@ -34,7 +34,7 @@ $langs->loadLangs(array("compta", "banks", "bills", "users", "accountancy"));
$id = GETPOST('id', 'int');
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
// Security check

2
htdocs/compta/deplacement/card.php
View File

@ -43,7 +43,7 @@ $id = GETPOST('id', 'int');
if ($user->societe_id) $socid=$user->societe_id;
$result = restrictedArea($user, 'deplacement', $id, '');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
$object = new Deplacement($db);

2
htdocs/compta/deplacement/document.php
View File

@ -39,7 +39,7 @@ $langs->loadLangs(array('other', 'trips', 'companies', 'interventions'));
$id = GETPOST('id', 'int');
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
// Security check

2
htdocs/compta/facture/card.php
View File

@ -75,7 +75,7 @@ $projectid = (GETPOST('projectid', 'int') ? GETPOST('projectid', 'int') : 0);
$id = (GETPOST('id', 'int') ? GETPOST('id', 'int') : GETPOST('facid', 'int')); // For backward compatibility
$ref = GETPOST('ref', 'alpha');
$socid = GETPOST('socid', 'int');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
$cancel = GETPOST('cancel', 'alpha');
$lineid = GETPOST('lineid', 'int');

2
htdocs/compta/facture/contact.php
View File

@ -42,7 +42,7 @@ $id = (GETPOST('id')?GETPOST('id', 'int'):GETPOST('facid', 'int')); // For
$ref = GETPOST('ref', 'alpha');
$lineid = GETPOST('lineid', 'int');
$socid = GETPOST('socid', 'int');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
// Security check
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/compta/prelevement/card.php
View File

@ -40,7 +40,7 @@ accessforbidden();
if ($user->societe_id > 0) accessforbidden();
// Get supervariables
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$id = GETPOST('id', 'int');
$ref = GETPOST('ref', 'alpha');
$socid = GETPOST('socid', 'int');

2
htdocs/compta/prelevement/create.php
View File

@ -44,7 +44,7 @@ if ($user->societe_id) $socid=$user->societe_id;
$result = restrictedArea($user, 'prelevement', '', '', 'bons');
// Get supervariables
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$mode = GETPOST('mode', 'alpha')?GETPOST('mode', 'alpha'):'real';
$format = GETPOST('format', 'aZ09');
$limit = GETPOST('limit', 'int')?GETPOST('limit', 'int'):$conf->liste_limit;

2
htdocs/compta/prelevement/ligne.php
View File

@ -39,7 +39,7 @@ $langs->loadlangs(array('banks', 'categories', 'bills', 'withdrawals'));
if ($user->societe_id > 0) accessforbidden();
// Get supervariables
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$id = GETPOST('id', 'int');
$socid = GETPOST('socid', 'int');

2
htdocs/compta/salaries/document.php
View File

@ -40,7 +40,7 @@ $langs->loadLangs(array("compta","bills","users","salaries","hrm"));
$id = GETPOST('id', 'int');
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
// Security check

2
htdocs/core/modules/oauth/github_oauthcallback.php
View File

@ -35,7 +35,7 @@ $urlwithroot=$urlwithouturlroot.DOL_URL_ROOT; // This is to use external domain
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtourl = GETPOST('backtourl', 'alpha');

2
htdocs/core/modules/oauth/google_oauthcallback.php
View File

@ -35,7 +35,7 @@ $urlwithroot=$urlwithouturlroot.DOL_URL_ROOT; // This is to use external domain
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtourl = GETPOST('backtourl', 'alpha');

2
htdocs/core/modules/oauth/stripelive_oauthcallback.php
View File

@ -35,7 +35,7 @@ $urlwithroot=$urlwithouturlroot.DOL_URL_ROOT; // This is to use external domain
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtourl = GETPOST('backtourl', 'alpha');

2
htdocs/core/modules/oauth/stripetest_oauthcallback.php
View File

@ -35,7 +35,7 @@ $urlwithroot=$urlwithouturlroot.DOL_URL_ROOT; // This is to use external domain
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtourl = GETPOST('backtourl', 'alpha');

2
htdocs/datapolicy/admin/setup.php
View File

@ -36,7 +36,7 @@ $langs->load('datapolicy@datapolicy');
if (! $user->admin) accessforbidden();
// Parameters
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtopage = GETPOST('backtopage', 'alpha');
$arrayofparameters=array(

2
htdocs/datapolicy/admin/setupmail.php
View File

@ -29,7 +29,7 @@ $langs->loadLangs(array('admin', 'companies', 'members', 'datapolicy'));
// Parameters
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtopage = GETPOST('backtopage', 'alpha');
$formadmin = new FormAdmin($db);

2
htdocs/datapolicy/public/index.php
View File

@ -39,7 +39,7 @@ require_once DOL_DOCUMENT_ROOT.'/datapolicy/class/datapolicy.class.php';
$idc = GETPOST('c', 'int');
$ids = GETPOST('s', 'int');
$ida = GETPOST('a', 'int');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$lang = GETPOST('l', 'alpha');
$code = GETPOST('key', 'alpha');

2
htdocs/don/admin/donation.php
View File

@ -37,7 +37,7 @@ $langs->loadLangs(array('admin', 'donations', 'accountancy', 'other'));
if (!$user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$value = GETPOST('value');
$label = GETPOST('label', 'alpha');
$scandir = GETPOST('scan_dir', 'alpha');

2
htdocs/don/document.php
View File

@ -45,7 +45,7 @@ $langs->loadLangs(array("companies","other","donations"));
$id = GETPOST('id', 'int');
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
$projectid = (GETPOST('projectid') ? GETPOST('projectid', 'int') : 0);

4
htdocs/ecm/search.php
View File

@ -41,8 +41,8 @@ $user->getrights('ecm');
// Get parameters
$socid = GETPOST('socid', 'int');
$action = GETPOST('action', 'alpha');
$section=GETPOST('section');
$action = GETPOST('action', 'aZ09');
$section = GETPOST('section');
if (! $section) $section=0;
$module = GETPOST('module', 'alpha');

2
htdocs/expedition/shipment.php
View File

@ -46,7 +46,7 @@ $langs->loadLangs(array('orders',"companies","bills",'propal','deliveries','stoc
$id = GETPOST('id', 'int'); // id of order
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$hookmanager->initHooks(array('ordershipmentcard'));

2
htdocs/expensereport/document.php
View File

@ -39,7 +39,7 @@ $langs->loadLangs(array("other","trips","companies","interventions"));
$id = GETPOST('id', 'int');
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
// Security check

2
htdocs/externalsite/admin/externalsite.php
View File

@ -40,7 +40,7 @@ $langs->loadLangs(array('admin', 'other', 'externalsite'));
$def = array();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
// Sauvegardes parametres
if ($action == 'update')

2
htdocs/fichinter/contact.php
View File

@ -36,7 +36,7 @@ $langs->loadLangs(array('interventions', 'sendings', 'companies'));
$id = GETPOST('id', 'int');
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
// Security check
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/fichinter/document.php
View File

@ -43,7 +43,7 @@ $langs->loadLangs(array('other', 'fichinter', 'companies', 'interventions'));
$id = GETPOST('id', 'int');
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
// Security check

2
htdocs/fourn/commande/document.php
View File

@ -43,7 +43,7 @@ $langs->loadLangs(array("bills", "orders", "sendings", "companies", "deliveries"
$id = GETPOST('id', 'int');
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
// Security check

2
htdocs/fourn/commande/info.php
View File

@ -38,7 +38,7 @@ $langs->loadLangs(array("suppliers", "orders", "companies", "stocks"));
$id=GETPOST('id', 'int');
$ref=GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
if (GETPOST('actioncode', 'array'))
{

2
htdocs/fourn/commande/orderstoinvoice.php
View File

@ -49,7 +49,7 @@ if (! $user->rights->fournisseur->facture->creer)
$id = (GETPOST('id') ? GETPOST('id', 'int') : GETPOST("facid")); // For backward compatibility
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
$sref = GETPOST('sref');
$sref_client = GETPOST('sref_client');

2
htdocs/fourn/facture/note.php
View File

@ -37,7 +37,7 @@ $langs->loadLangs(array("bills", "companies"));
$id = (GETPOST('id', 'int') ? GETPOST('id', 'int') : GETPOST('facid', 'int'));
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
// Security check
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/ftp/admin/ftpclient.php
View File

@ -33,7 +33,7 @@ if (!$user->admin) accessforbidden();
$def = array();
$lastftpentry=0;
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$entry = GETPOST('numero_entry', 'alpha');

2
htdocs/holiday/document.php
View File

@ -41,7 +41,7 @@ $langs->loadLangs(array('other', 'holiday', 'companies'));
$id = GETPOST('id', 'int');
$ref = GETPOST('ref', 'alpha');
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$confirm = GETPOST('confirm', 'alpha');
// Security check

14
htdocs/hrm/admin/admin_hrm.php
View File

@ -30,7 +30,7 @@ $langs->loadLangs(array('admin', 'hrm'));
if (! $user->admin)
accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
// Other parameters HRM_*
$list = array (
@ -42,15 +42,15 @@ $list = array (
*/
if ($action == 'update') {
$error = 0;
foreach ($list as $constname) {
$constvalue = GETPOST($constname, 'alpha');
if (! dolibarr_set_const($db, $constname, $constvalue, 'chaine', 0, '', $conf->entity)) {
$error ++;
}
}
if (! $error) {
setEventMessages($langs->trans("SetupSaved"), null, 'mesgs');
} else {
@ -87,13 +87,13 @@ print "</tr>\n";
foreach ($list as $key) {
$var = ! $var;
print '<tr ' . $bc[$var] . ' class="value">';
// Param
$label = $langs->trans($key);
print '<td width="50%"><label for="' . $key . '">' . $label . '</label></td>';
// Value
print '<td>';
print '<input type="text" size="20" id="' . $key . '" name="' . $key . '" value="' . $conf->global->$key . '">';

2
htdocs/hrm/establishment/card.php
View File

@ -33,7 +33,7 @@ if (! $user->admin) accessforbidden();
$error=0;
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$cancel = GETPOST('cancel', 'alpha');
$confirm = GETPOST('confirm', 'alpha');
$id = GETPOST('id', 'int');

2
htdocs/modulebuilder/admin/setup.php
View File

@ -29,7 +29,7 @@ $langs->loadLangs(array("admin", "other", "modulebuilder"));
if (!$user->admin || empty($conf->modulebuilder->enabled))
accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtopage = GETPOST('backtopage', 'alpha');
/*

2
htdocs/modulebuilder/template/admin/about.php
View File

@ -48,7 +48,7 @@ $langs->loadLangs(array("errors","admin","mymodule@mymodule"));
if (! $user->admin) accessforbidden();
// Parameters
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtopage = GETPOST('backtopage', 'alpha');

2
htdocs/modulebuilder/template/admin/setup.php
View File

@ -50,7 +50,7 @@ $langs->loadLangs(array("admin", "mymodule@mymodule"));
if (! $user->admin) accessforbidden();
// Parameters
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$backtopage = GETPOST('backtopage', 'alpha');
$arrayofparameters=array(

2
htdocs/paybox/admin/paybox.php
View File

@ -35,7 +35,7 @@ $langs->loadLangs(array('admin', 'other', 'paybox', 'paypal'));
if (!$user->admin)
accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
if ($action == 'setvalue' && $user->admin)

2
htdocs/paypal/admin/paypal.php
View File

@ -37,7 +37,7 @@ $langs->loadLangs(array('admin', 'other', 'paypal', 'paybox'));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
if ($action == 'setvalue' && $user->admin)
{

2
htdocs/printing/admin/printing.php
View File

@ -35,7 +35,7 @@ $langs->loadLangs(array('admin', 'printing', 'oauth'));
if (! $user->admin) accessforbidden();
$action = GETPOST('action', 'alpha');
$action = GETPOST('action', 'aZ09');
$mode = GETPOST('mode', 'alpha');
$value = GETPOST('value', 'alpha', 0, null, null, 1); // The value may be __google__docs so we force disable of replace
$varname = GETPOST('varname', 'alpha');

Some files were not shown because too many files have changed in this diff Show More