lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

FIX Protection to avoid #16504

Browse Source
This commit is contained in:
Laurent Destailleur 2021-03-01 23:08:03 +01:00
parent fb0eda446e
commit b8bd5cd0ee
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
htdocs/product/class/product.class.php
View File

@ -4374,6 +4374,10 @@ class Product extends CommonObject
{ {
global $alreadyfound; global $alreadyfound;
if (empty($id)) {
return array();
}
$sql = "SELECT p.rowid, p.ref, p.label as label, p.fk_product_type,"; $sql = "SELECT p.rowid, p.ref, p.label as label, p.fk_product_type,";
$sql .= " pa.qty as qty, pa.fk_product_fils as id, pa.incdec"; $sql .= " pa.qty as qty, pa.fk_product_fils as id, pa.incdec";
$sql .= " FROM ".MAIN_DB_PREFIX."product as p,"; $sql .= " FROM ".MAIN_DB_PREFIX."product as p,";
@ -4387,7 +4391,8 @@ class Product extends CommonObject
if ($level == 1) { $alreadyfound = array($id=>1); // We init array of found object to start of tree, so if we found it later (should not happened), we stop immediatly if ($level == 1) { $alreadyfound = array($id=>1); // We init array of found object to start of tree, so if we found it later (should not happened), we stop immediatly
} }
// Protection against infinite loop // Protection against infinite loop
if ($level > 30) { return array(); if ($level > 30) {
return array();
} }
$res = $this->db->query($sql); $res = $this->db->query($sql);