lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Sanitize vars

Browse Source
This commit is contained in:
Laurent Destailleur 2020-08-27 21:18:49 +02:00
parent fe4acf4e4e
commit c419e2f0de
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
htdocs/product/stock/product.php
View File

@ -143,7 +143,7 @@ if ($action == 'addlimitstockwarehouse' && !empty($user->rights->produit->creer)
if ($pse->update($user) > 0) setEventMessages($langs->trans('ProductStockWarehouseUpdated'), null, 'mesgs'); if ($pse->update($user) > 0) setEventMessages($langs->trans('ProductStockWarehouseUpdated'), null, 'mesgs');
} else { } else {
// Create // Create
$pse->fk_entrepot = GETPOST('fk_entrepot'); $pse->fk_entrepot = GETPOST('fk_entrepot', 'int');
$pse->fk_product = $id; $pse->fk_product = $id;
$pse->seuil_stock_alerte = GETPOST('seuil_stock_alerte'); $pse->seuil_stock_alerte = GETPOST('seuil_stock_alerte');
$pse->desiredstock = GETPOST('desiredstock'); $pse->desiredstock = GETPOST('desiredstock');
@ -243,10 +243,10 @@ if ($action == "correct_stock" && !$cancel)
{ {
$result = $object->correct_stock_batch( $result = $object->correct_stock_batch(
$user, $user,
GETPOST("id_entrepot"), GETPOST("id_entrepot", 'int'),
GETPOST("nbpiece"), GETPOST("nbpiece"),
GETPOST("mouvement"), GETPOST("mouvement"),
GETPOST("label"), // label movement GETPOST("label", 'alphanohtml'), // label movement
$priceunit, $priceunit,
$d_eatby, $d_eatby,
$d_sellby, $d_sellby,
@ -258,10 +258,10 @@ if ($action == "correct_stock" && !$cancel)
} else { } else {
$result = $object->correct_stock( $result = $object->correct_stock(
$user, $user,
GETPOST("id_entrepot"), GETPOST("id_entrepot", 'int'),
GETPOST("nbpiece"), GETPOST("nbpiece"),
GETPOST("mouvement"), GETPOST("mouvement"),
GETPOST("label"), GETPOST("label", 'alphanohtml'),
$priceunit, $priceunit,
GETPOST('inventorycode'), GETPOST('inventorycode'),
$origin_element, $origin_element,
@ -397,7 +397,7 @@ if ($action == "transfert_stock" && !$cancel)
// Remove stock // Remove stock
$result1 = $object->correct_stock( $result1 = $object->correct_stock(
$user, $user,
GETPOST("id_entrepot"), GETPOST("id_entrepot", 'int'),
GETPOST("nbpiece"), GETPOST("nbpiece"),
1, 1,
GETPOST("label"), GETPOST("label"),
@ -411,7 +411,7 @@ if ($action == "transfert_stock" && !$cancel)
// Add stock // Add stock
$result2 = $object->correct_stock( $result2 = $object->correct_stock(
$user, $user,
GETPOST("id_entrepot_destination"), GETPOST("id_entrepot_destination", 'int'),
GETPOST("nbpiece"), GETPOST("nbpiece"),
0, 0,
GETPOST("label"), GETPOST("label"),
@ -552,7 +552,7 @@ if ($id > 0 || $ref)
print $form->editfieldval($text, 'cost_price', $object->cost_price, $object, $usercancreate, 'amount:6'); print $form->editfieldval($text, 'cost_price', $object->cost_price, $object, $usercancreate, 'amount:6');
print '</td></tr>'; print '</td></tr>';
// PMP // AWP
print '<tr><td class="titlefield">'.$form->textwithpicto($langs->trans("AverageUnitPricePMPShort"), $langs->trans("AverageUnitPricePMPDesc")).'</td>'; print '<tr><td class="titlefield">'.$form->textwithpicto($langs->trans("AverageUnitPricePMPShort"), $langs->trans("AverageUnitPricePMPDesc")).'</td>';
print '<td>'; print '<td>';
if ($object->pmp > 0) print price($object->pmp).' '.$langs->trans("HT"); if ($object->pmp > 0) print price($object->pmp).' '.$langs->trans("HT");