lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix sanitize

Browse Source
This commit is contained in:
Laurent Destailleur 2021-06-04 12:30:46 +02:00
parent 920f8b0b58
commit e5ab721660
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/holiday/month_report.php
View File

@ -154,7 +154,7 @@ if (!empty($search_employee) && $search_employee > 0) {
$sql .= " AND cp.fk_user = ".((int) $search_employee); $sql .= " AND cp.fk_user = ".((int) $search_employee);
} }
if (!empty($search_type) && $search_type != '-1') { if (!empty($search_type) && $search_type != '-1') {
$sql .= ' AND cp.fk_type IN ('.$db->escape($search_type).')'; $sql .= ' AND cp.fk_type IN ('.$db->sanitize($search_type).')';
} }
if (!empty($search_description)) { if (!empty($search_description)) {
$sql .= natural_search('cp.description', $search_description); $sql .= natural_search('cp.description', $search_description);