lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

FIX 11.0 - $this->socid injected in query without checking for empty value

Browse Source
This commit is contained in:
Florian Mortgat 2021-02-25 14:51:57 +01:00
parent 5d3168c2a0
commit d59ee06438
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/contact/class/contact.class.php
View File

@ -1686,7 +1686,7 @@ class Contact extends CommonObject
$this->db->begin();
$sql = "DELETE FROM ".MAIN_DB_PREFIX."societe_contacts WHERE fk_soc=".$this->socid." AND fk_socpeople=".$this->id; ;
$sql = "DELETE FROM ".MAIN_DB_PREFIX."societe_contacts WHERE fk_soc=".intval($this->socid)." AND fk_socpeople=".$this->id; ;
dol_syslog(__METHOD__, LOG_DEBUG);
$result = $this->db->query($sql);