lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix: register_globals=off

Browse Source
This commit is contained in:
Laurent Destailleur 2004-08-13 21:27:44 +00:00
parent 0aabefb046
commit a80a67fd05
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
htdocs/contact/index.php
View File

@ -1,6 +1,7 @@
<?PHP <?PHP
/* Copyright (C) 2001-2004 Rodolphe Quiedeville <rodolphe@quiedeville.org> /* Copyright (C) 2001-2004 Rodolphe Quiedeville <rodolphe@quiedeville.org>
* Copyright (C) 2003 Éric Seigne <erics@rycks.com> * Copyright (C) 2003 Éric Seigne <erics@rycks.com>
* Copyright (C) 2004 Laurent Destailleur <eldy@users.sourceforge.net>
* *
* This program is free software; you can redistribute it and/or modify * This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by * it under the terms of the GNU General Public License as published by
@ -34,6 +35,7 @@ if ($user->societe_id > 0)
llxHeader(); llxHeader();
$contactname=isset($_GET["contactname"])?$_GET["contactname"]:$_POST["contactname"];
$page = $_GET["page"]; $page = $_GET["page"];
$sortfield = $_GET["sortfield"]; $sortfield = $_GET["sortfield"];
$sortorder = $_GET["sortorder"]; $sortorder = $_GET["sortorder"];
@ -57,6 +59,7 @@ if ($_GET["view"] == 'recent') { $text="(R
$titre = "Liste des contacts $text"; $titre = "Liste des contacts $text";
/* /*
* *
* Mode liste * Mode liste
@ -79,11 +82,9 @@ if (strlen($_GET["begin"])) // filtre sur la premiere lettre du nom
$sql .= " WHERE upper(p.name) like '".$_GET["begin"]."%'"; $sql .= " WHERE upper(p.name) like '".$_GET["begin"]."%'";
} }
if (strlen($_GET["contactname"]) && $_GET["mode"] == "search") // acces a partir du module de recherche if ($contactname)
{ {
$sql .= " WHERE ( lower(p.name) like '%".strtolower($_GET["contactname"])."%' OR lower(p.firstname) like '%".strtolower($_GET["contactname"])."%') "; $sql .= " WHERE (p.name like '%".$contactname."%' OR p.firstname like '%".$contactname."%') ";
$sortfield = "lower(p.name)";
$sortorder = "ASC";
} }
if ($socid) if ($socid)