lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix use of newtoken()

Browse Source
This commit is contained in:
Laurent Destailleur 2020-07-06 09:39:26 +02:00
parent b33e639099
commit b76828df9f
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
htdocs/projet/element.php
View File

@ -592,7 +592,7 @@ if (!$showdatefilter)
{ {
print '<div class="center centpercent">'; print '<div class="center centpercent">';
print '<form action="'.$_SERVER["PHP_SELF"].'?id='.$object->id.'" method="post">'; print '<form action="'.$_SERVER["PHP_SELF"].'?id='.$object->id.'" method="post">';
print '<input type="hidden" name="token" value="'.$_SESSION["newtoken"].'">'; print '<input type="hidden" name="token" value="'.newToken().'">';
print '<input type="hidden" name="tablename" value="'.$tablename.'">'; print '<input type="hidden" name="tablename" value="'.$tablename.'">';
print '<input type="hidden" name="action" value="view">'; print '<input type="hidden" name="action" value="view">';
print '<table class="center"><tr>'; print '<table class="center"><tr>';
@ -894,7 +894,7 @@ foreach ($listofreferent as $key => $value)
// Define form with the combo list of elements to link // Define form with the combo list of elements to link
$addform .= '<div class="inline-block valignmiddle">'; $addform .= '<div class="inline-block valignmiddle">';
$addform .= '<form action="'.$_SERVER["PHP_SELF"].'?id='.$object->id.'" method="post">'; $addform .= '<form action="'.$_SERVER["PHP_SELF"].'?id='.$object->id.'" method="post">';
$addform .= '<input type="hidden" name="token" value="'.$_SESSION["newtoken"].'">'; $addform .= '<input type="hidden" name="token" value="'.newToken().'">';
$addform .= '<input type="hidden" name="tablename" value="'.$tablename.'">'; $addform .= '<input type="hidden" name="tablename" value="'.$tablename.'">';
$addform .= '<input type="hidden" name="action" value="addelement">'; $addform .= '<input type="hidden" name="action" value="addelement">';
$addform .= '<input type="hidden" name="datesrfc" value="'.dol_print_date($dates, 'dayhourrfc').'">'; $addform .= '<input type="hidden" name="datesrfc" value="'.dol_print_date($dates, 'dayhourrfc').'">';

4
htdocs/public/payment/newpayment.php
View File

@ -2275,7 +2275,7 @@ if (preg_match('/^dopayment/', $action)) // If we choosed/click on the payment
var hiddenInput2 = document.createElement('input'); var hiddenInput2 = document.createElement('input');
hiddenInput2.setAttribute('type', 'hidden'); hiddenInput2.setAttribute('type', 'hidden');
hiddenInput2.setAttribute('name', 'token'); hiddenInput2.setAttribute('name', 'token');
hiddenInput2.setAttribute('value', '<?php echo $_SESSION["newtoken"]; ?>'); hiddenInput2.setAttribute('value', '<?php echo newToken(); ?>');
form.appendChild(hiddenInput2); form.appendChild(hiddenInput2);
// Submit the form // Submit the form
@ -2299,7 +2299,7 @@ if (preg_match('/^dopayment/', $action)) // If we choosed/click on the payment
var hiddenInput2 = document.createElement('input'); var hiddenInput2 = document.createElement('input');
hiddenInput2.setAttribute('type', 'hidden'); hiddenInput2.setAttribute('type', 'hidden');
hiddenInput2.setAttribute('name', 'token'); hiddenInput2.setAttribute('name', 'token');
hiddenInput2.setAttribute('value', '<?php echo $_SESSION["newtoken"]; ?>'); hiddenInput2.setAttribute('value', '<?php echo newToken(); ?>');
form.appendChild(hiddenInput2); form.appendChild(hiddenInput2);
// Submit the form // Submit the form