fix : invoid sql injection

This commit is contained in:
Philippe GRAND 2019-11-21 09:49:53 +01:00
parent 54d67de538
commit 9996c1ca7a

View File

@ -575,8 +575,8 @@ if ($action == 'delmouv') {
}
if ($action == 'delbookkeepingyear') {
$form_question = array();
$delyear = GETPOST('delyear');
$deljournal = GETPOST('deljournal');
$delyear = GETPOST('delyear', 'int');
$deljournal = GETPOST('deljournal', 'alpha');
if (empty($delyear)) {
$delyear = dol_print_date(dol_now(), '%Y');