Amélioration sécurité sur l'édition d'un facture validée

This commit is contained in:
Regis Houssin 2006-07-16 12:57:42 +00:00
parent d0d2cd7d02
commit b8e75afb5c

View File

@ -168,7 +168,7 @@ if ($_GET['action'] == 'modif' && $user->rights->facture->modifier && $conf->glo
$fac->fetch($_GET['facid']); $fac->fetch($_GET['facid']);
// On vérifie si la facture a des paiements // On vérifie si la facture a des paiements
$sql = 'SELECT pf.amount,'; $sql = 'SELECT pf.amount';
$sql.= ' FROM '.MAIN_DB_PREFIX.'paiement_facture as pf'; $sql.= ' FROM '.MAIN_DB_PREFIX.'paiement_facture as pf';
$sql.= ' WHERE pf.fk_facture = '.$fac->id; $sql.= ' WHERE pf.fk_facture = '.$fac->id;
@ -176,6 +176,9 @@ if ($_GET['action'] == 'modif' && $user->rights->facture->modifier && $conf->glo
if ($result) if ($result)
{ {
$i = 0;
$num = $db->num_rows($result);
while ($i < $num) while ($i < $num)
{ {
$objp = $db->fetch_object($result); $objp = $db->fetch_object($result);