Amlioration scurit sur l'dition d'un facture valide

This commit is contained in:
Regis Houssin 2006-07-16 12:57:42 +00:00
parent d0d2cd7d02
commit b8e75afb5c

View File

@ -168,7 +168,7 @@ if ($_GET['action'] == 'modif' && $user->rights->facture->modifier && $conf->glo
$fac->fetch($_GET['facid']);
// On vérifie si la facture a des paiements
$sql = 'SELECT pf.amount,';
$sql = 'SELECT pf.amount';
$sql.= ' FROM '.MAIN_DB_PREFIX.'paiement_facture as pf';
$sql.= ' WHERE pf.fk_facture = '.$fac->id;
@ -176,6 +176,9 @@ if ($_GET['action'] == 'modif' && $user->rights->facture->modifier && $conf->glo
if ($result)
{
$i = 0;
$num = $db->num_rows($result);
while ($i < $num)
{
$objp = $db->fetch_object($result);