lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Escape output

Browse Source
This commit is contained in:
Laurent Destailleur 2020-09-20 19:21:04 +02:00
parent e6fc9d3b5e
commit b2f8c4c6b8
1 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
htdocs/fourn/commande/card.php
View File

@ -1484,8 +1484,8 @@ if (!empty($conf->projet->enabled)) { $formproject = new FormProjets($db); }
$help_url = 'EN:Module_Suppliers_Orders|FR:CommandeFournisseur|ES:Módulo_Pedidos_a_proveedores'; $help_url = 'EN:Module_Suppliers_Orders|FR:CommandeFournisseur|ES:Módulo_Pedidos_a_proveedores';
llxHeader('', $langs->trans("Order"), $help_url); llxHeader('', $langs->trans("Order"), $help_url);
$now = dol_now(); $now = dol_now();
if ($action == 'create') if ($action == 'create')
{ {
print load_fiche_titre($langs->trans('NewOrderSupplier'), '', 'supplier_order'); print load_fiche_titre($langs->trans('NewOrderSupplier'), '', 'supplier_order');
@ -1786,8 +1786,7 @@ if ($action == 'create')
print '</table>'; print '</table>';
} }
print "</form>\n"; print "</form>\n";
} elseif (!empty($object->id)) } elseif (!empty($object->id)) {
{
$result = $object->fetch($id, $ref); $result = $object->fetch($id, $ref);
$societe = new Fournisseur($db); $societe = new Fournisseur($db);
@ -2192,7 +2191,7 @@ if ($action == 'create')
print '<td>'; print '<td>';
if ($action != 'editincoterm') if ($action != 'editincoterm')
{ {
print $form->textwithpicto($object->display_incoterms(), $object->label_incoterms, 1); print $form->textwithpicto(dol_escape_htmltag($object->display_incoterms()), $object->label_incoterms, 1);
} else { } else {
print $form->select_incoterms((!empty($object->fk_incoterms) ? $object->fk_incoterms : ''), (!empty($object->location_incoterms) ? $object->location_incoterms : ''), $_SERVER['PHP_SELF'].'?id='.$object->id); print $form->select_incoterms((!empty($object->fk_incoterms) ? $object->fk_incoterms : ''), (!empty($object->location_incoterms) ? $object->location_incoterms : ''), $_SERVER['PHP_SELF'].'?id='.$object->id);
} }