lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix XSS

Browse Source
This commit is contained in:
Laurent Destailleur 2015-09-05 20:03:02 +02:00
parent 304a71710e
commit a21b015cbb
2 changed files with 5 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/holiday/list.php
View File

@ -282,7 +282,7 @@ print "</tr>\n";
// FILTRES // FILTRES
print '<tr class="liste_titre">'; print '<tr class="liste_titre">';
print '<td class="liste_titre" align="left" width="50">'; print '<td class="liste_titre" align="left" width="50">';
print '<input class="flat" size="4" type="text" name="search_ref" value="'.$search_ref.'">'; print '<input class="flat" size="4" type="text" name="search_ref" value="'.dol_escape_htmltag($search_ref).'">';
print '</td>'; print '</td>';
// DATE CREATE // DATE CREATE

7
htdocs/projet/card.php
View File

@ -310,10 +310,11 @@ if (empty($reshook))
{ {
$langs->load("other"); $langs->load("other");
$upload_dir = $conf->projet->dir_output . "/"; $upload_dir = $conf->projet->dir_output . "/";
$file = $upload_dir . '/' . GETPOST('file'); $urlfile=GETPOST('urlfile','alpha');
$file = $upload_dir . '/' . $filetodelete;
$ret=dol_delete_file($file); $ret=dol_delete_file($file);
if ($ret) setEventMessage($langs->trans("FileWasRemoved", GETPOST('urlfile'))); if ($ret) setEventMessage($langs->trans("FileWasRemoved", $urlfile));
else setEventMessage($langs->trans("ErrorFailToDeleteFile", GETPOST('urlfile')), 'errors'); else setEventMessage($langs->trans("ErrorFailToDeleteFile", $urlfile), 'errors');
} }
} }