diff --git a/htdocs/comm/propal.php b/htdocs/comm/propal.php index 1b456803cb6..d460bfd892f 100644 --- a/htdocs/comm/propal.php +++ b/htdocs/comm/propal.php @@ -1830,7 +1830,10 @@ else $sortorder=$_GET['sortorder']; $sortfield=$_GET['sortfield']; $page=$_GET['page']; - $viewstatut=$_GET['viewstatut']; + $viewstatut=addslashes($_GET['viewstatut']); + $propal_statut = addslashes($_GET['propal_statut']); + if($propal_statut != '') + $viewstatut=$propal_statut; if (! $sortfield) $sortfield='p.datep'; if (! $sortorder) $sortorder='DESC'; @@ -1865,13 +1868,16 @@ else } if ($sall) $sql.= " AND (s.nom like '%".addslashes($sall)."%' OR p.note like '%".addslashes($sall)."%' OR pd.description like '%".addslashes($sall)."%')"; if ($socid) $sql .= ' AND s.rowid = '.$socid; - if ($_GET['viewstatut'] <> '') + if ($viewstatut <> '') { - $sql .= ' AND p.fk_statut in ('.$_GET['viewstatut'].')'; + $sql .= ' AND p.fk_statut in ('.$viewstatut.')'; } if ($month > 0) { - $sql .= " AND date_format(p.datep, '%Y-%m') = '$year-$month'"; + if ($year > 0) + $sql .= " AND date_format(p.datep, '%Y-%m') = '$year-$month'"; + else + $sql .= " AND date_format(p.datep, '%m') = '$month'"; } if ($year > 0) { @@ -1900,7 +1906,8 @@ else print_liste_field_titre($langs->trans('DateEndPropalShort'),$_SERVER["PHP_SELF"],'dfv','','&socid='.$socid.'&viewstatut='.$viewstatut, 'align="center"',$sortfield,$sortorder); print_liste_field_titre($langs->trans('Price'),$_SERVER["PHP_SELF"],'p.total_ht','','&socid='.$socid.'&viewstatut='.$viewstatut, 'align="right"',$sortfield,$sortorder); print_liste_field_titre($langs->trans('Status'),$_SERVER["PHP_SELF"],'p.fk_statut','','&socid='.$socid.'&viewstatut='.$viewstatut,'align="right"',$sortfield,$sortorder); - print "\n"; + print '