lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Escape string

Browse Source
This commit is contained in:
Laurent Destailleur 2021-04-25 19:31:19 +02:00
parent 389b71bc7e
commit a8939377de
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
htdocs/compta/bank/line.php
View File

@ -452,7 +452,7 @@ if ($result) {
} }
print '</td>'; print '</td>';
} else { } else {
print '<td>'.$objp->fk_type.' '.$objp->num_chq.'</td>'; print '<td>'.$objp->fk_type.' '.dol_escape_htmltag($objp->num_chq).'</td>';
} }
print "</tr>"; print "</tr>";
@ -462,7 +462,7 @@ if ($result) {
print "</td>"; print "</td>";
if ($user->rights->banque->modifier || $user->rights->banque->consolidate) { if ($user->rights->banque->modifier || $user->rights->banque->consolidate) {
print '<td>'; print '<td>';
print '<input type="text" class="flat minwidth200" name="emetteur" value="'.(empty($objp->emetteur) ? '' : stripslashes($objp->emetteur)).'">'; print '<input type="text" class="flat minwidth200" name="emetteur" value="'.(empty($objp->emetteur) ? '' : dol_escape_htmltag($objp->emetteur)).'">';
print '</td>'; print '</td>';
} else { } else {
print '<td>'.$objp->emetteur.'</td>'; print '<td>'.$objp->emetteur.'</td>';
@ -475,10 +475,10 @@ if ($result) {
print "</td>"; print "</td>";
if ($user->rights->banque->modifier || $user->rights->banque->consolidate) { if ($user->rights->banque->modifier || $user->rights->banque->consolidate) {
print '<td>'; print '<td>';
print '<input type="text" class="flat minwidth200" name="banque" value="'.(empty($objp->banque) ? '' : $objp->banque).'">'; print '<input type="text" class="flat minwidth200" name="banque" value="'.(empty($objp->banque) ? '' : dol_escape_htmltag($objp->banque)).'">';
print '</td>'; print '</td>';
} else { } else {
print '<td>'.$objp->banque.'</td>'; print '<td>'.dol_escape_htmltag($objp->banque).'</td>';
} }
print "</tr>"; print "</tr>";
@ -523,6 +523,7 @@ if ($result) {
print "</tr>"; print "</tr>";
// Description // Description
$reg = array();
print "<tr><td>".$langs->trans("Label")."</td>"; print "<tr><td>".$langs->trans("Label")."</td>";
if ($user->rights->banque->modifier || $user->rights->banque->consolidate) { if ($user->rights->banque->modifier || $user->rights->banque->consolidate) {
print '<td>'; print '<td>';
@ -531,7 +532,7 @@ if ($result) {
// Label generique car entre parentheses. On l'affiche en le traduisant // Label generique car entre parentheses. On l'affiche en le traduisant
print $langs->trans($reg[1]); print $langs->trans($reg[1]);
} else { } else {
print $objp->label; print dol_escape_htmltag($objp->label);
} }
print '">'; print '">';
print '</td>'; print '</td>';
@ -541,7 +542,7 @@ if ($result) {
// Label generique car entre parentheses. On l'affiche en le traduisant // Label generique car entre parentheses. On l'affiche en le traduisant
print $langs->trans($reg[1]); print $langs->trans($reg[1]);
} else { } else {
print $objp->label; print dol_escape_htmltag($objp->label);
} }
print '</td>'; print '</td>';
} }