lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: security with multi-company

Browse Source
This commit is contained in:
Regis Houssin 2009-05-04 08:48:49 +00:00
parent 8b02eb1f3f
commit 9037816c33
16 changed files with 16 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/product/barcode.php
View File

@ -37,7 +37,7 @@ $langs->load("bills");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/document.php
View File

@ -42,7 +42,7 @@ $action=empty($_GET['action']) ? (empty($_POST['action']) ? '' : $_POST['action'
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/fiche.php
View File

@ -44,7 +44,7 @@ $langs->load("stocks");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/fournisseurs.php
View File

@ -39,7 +39,7 @@ $langs->load("bills");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/photos.php
View File

@ -38,7 +38,7 @@ $langs->load("bills");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/price.php
View File

@ -38,7 +38,7 @@ $langs->load("bills");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/sousproduits/fiche.php
View File

@ -39,7 +39,7 @@ $langs->load("products");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/stats/commande.php
View File

@ -39,7 +39,7 @@ $langs->load("companies");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/stats/commande_fournisseur.php
View File

@ -39,7 +39,7 @@ $langs->load("companies");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/stats/contrat.php
View File

@ -38,7 +38,7 @@ $langs->load("companies");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/stats/facture.php
View File

@ -39,7 +39,7 @@ $langs->load("products");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/stats/facture_fournisseur.php
View File

@ -40,7 +40,7 @@ $langs->load("companies");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/stats/fiche.php
View File

@ -42,7 +42,7 @@ $mode=isset($_GET["mode"])?$_GET["mode"]:'byunit';
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/stats/propal.php
View File

@ -38,7 +38,7 @@ $langs->load("companies");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/stock/product.php
View File

@ -40,7 +40,7 @@ $langs->load("bills");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;

2
htdocs/product/traduction.php
View File

@ -39,7 +39,7 @@ $langs->load("bills");
if (isset($_GET["id"]) || isset($_GET["ref"]))
{
$id = isset($_GET["id"])?$_GET["id"]:(isset($_GET["ref"])?$_GET["ref"]:'');
$fieldid = isset($_REQUEST["ref"])?'ref':'rowid';
$fieldid = isset($_GET["ref"])?'ref':'rowid';
}
if ($user->societe_id) $socid=$user->societe_id;