lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

FIX #11671 CVE-2019-15062

Browse Source
This commit is contained in:
Laurent Destailleur 2019-08-16 16:41:53 +02:00
parent a8afb4549a
commit d21e557100
3 changed files with 7 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
htdocs/core/actions_linkedfiles.inc.php
View File

@ -125,8 +125,7 @@ if ($action == 'confirm_deletefile' && $confirm == 'yes')
{ {
require_once DOL_DOCUMENT_ROOT . '/core/class/link.class.php'; require_once DOL_DOCUMENT_ROOT . '/core/class/link.class.php';
$link = new Link($db); $link = new Link($db);
$link->id = $linkid; $link->fetch($linkid);
$link->fetch();
$res = $link->delete($user); $res = $link->delete($user);
$langs->load('link'); $langs->load('link');
@ -160,8 +159,7 @@ elseif ($action == 'confirm_updateline' && GETPOST('save','alpha') && GETPOST('l
require_once DOL_DOCUMENT_ROOT . '/core/class/link.class.php'; require_once DOL_DOCUMENT_ROOT . '/core/class/link.class.php';
$langs->load('link'); $langs->load('link');
$link = new Link($db); $link = new Link($db);
$link->id = GETPOST('linkid', 'int'); $f = $link->fetch(GETPOST('linkid', 'int'));
$f = $link->fetch();
if ($f) if ($f)
{ {
$link->url = GETPOST('link', 'alpha'); $link->url = GETPOST('link', 'alpha');
@ -169,7 +167,7 @@ elseif ($action == 'confirm_updateline' && GETPOST('save','alpha') && GETPOST('l
{ {
$link->url = 'http://' . $link->url; $link->url = 'http://' . $link->url;
} }
$link->label = GETPOST('label', 'alpha'); $link->label = GETPOST('label', 'alphanohtml');
$res = $link->update($user); $res = $link->update($user);
if (!$res) if (!$res)
{ {

4
htdocs/core/class/html.formfile.class.php
View File

@ -1758,7 +1758,7 @@ class FormFile
print $langs->trans('Link') . ': <input type="text" name="link" value="' . $link->url . '">'; print $langs->trans('Link') . ': <input type="text" name="link" value="' . $link->url . '">';
print '</td>'; print '</td>';
print '<td>'; print '<td>';
print $langs->trans('Label') . ': <input type="text" name="label" value="' . $link->label . '">'; print $langs->trans('Label') . ': <input type="text" name="label" value="' . dol_escape_htmltag($link->label) . '">';
print '</td>'; print '</td>';
print '<td align="center">' . dol_print_date(dol_now(), "dayhour", "tzuser") . '</td>'; print '<td align="center">' . dol_print_date(dol_now(), "dayhour", "tzuser") . '</td>';
print '<td align="right"></td>'; print '<td align="right"></td>';
@ -1772,7 +1772,7 @@ class FormFile
print '<td>'; print '<td>';
print img_picto('', 'object_globe').' '; print img_picto('', 'object_globe').' ';
print '<a data-ajax="false" href="' . $link->url . '" target="_blank">'; print '<a data-ajax="false" href="' . $link->url . '" target="_blank">';
print $link->label; print dol_escape_htmltag($link->label);
print '</a>'; print '</a>';
print '</td>'."\n"; print '</td>'."\n";
print '<td align="right"></td>'; print '<td align="right"></td>';

4
htdocs/user/card.php
View File

@ -318,12 +318,12 @@ if (empty($reshook)) {
{ {
$error = 0; $error = 0;
if (!$_POST["lastname"]) { if (! GETPOST("lastname", 'alpha')) {
setEventMessages($langs->trans("NameNotDefined"), null, 'errors'); setEventMessages($langs->trans("NameNotDefined"), null, 'errors');
$action = "edit"; // Go back to create page $action = "edit"; // Go back to create page
$error ++; $error ++;
} }
if (!$_POST["login"]) { if (! GETPOST("login", 'alpha')) {
setEventMessages($langs->trans("LoginNotDefined"), null, 'errors'); setEventMessages($langs->trans("LoginNotDefined"), null, 'errors');
$action = "edit"; // Go back to create page $action = "edit"; // Go back to create page
$error ++; $error ++;