Merge pull request #3010 from GPCsolutions/3.6-3009

FIX #3009: Better filtering to prevent SQL injection
This commit is contained in:
Juanjo Menent 2015-06-12 21:25:53 +02:00
commit ab3190df25

View File

@ -49,8 +49,8 @@ $sall=GETPOST("sall");
$type=GETPOST("type","int");
$search_sale = GETPOST("search_sale");
$search_categ = GETPOST("search_categ",'int');
$tosell = GETPOST("tosell");
$tobuy = GETPOST("tobuy");
$tosell = GETPOST("tosell", 'int');
$tobuy = GETPOST("tobuy", 'int');
$fourn_id = GETPOST("fourn_id",'int');
$catid = GETPOST('catid','int');