lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

add sanitize to sql

Browse Source
This commit is contained in:
jpb 2022-06-13 09:09:19 +02:00
parent 2209d31b2c
commit af0846e2f7
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
htdocs/holiday/card_group.php
View File

@ -264,7 +264,7 @@ if (empty($reshook)) {
/** GROUPS */
$sql = ' SELECT DISTINCT u.rowid,u.lastname,u.firstname from ' . MAIN_DB_PREFIX . 'user as u';
$sql .= ' LEFT JOIN ' . MAIN_DB_PREFIX . 'usergroup_user as ug on ug.fk_user = u.rowid ';
$sql .= ' WHERE fk_usergroup in (' . implode(',', $groups) . ')';
$sql .= ' WHERE fk_usergroup in (' .$this->db->sanitize(implode(',', $groups)) . ')';
$resql = $db->query($sql);
if ($resql) {
@ -423,7 +423,7 @@ if ((empty($id) && empty($ref)) || $action == 'create' || $action == 'add') {
}
$("input[name=autoValidation]").click( function(e) {
console.log("chang")
if( $("input[name=autoValidation]").is(":checked") ){
$("#AutoSendMail").prop("disabled", false);