lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

db escape

Browse Source
This commit is contained in:
Frédéric FRANCE 2019-10-02 08:05:20 +02:00
parent 79846b8cdf
commit f928bacfb9
No known key found for this signature in database
GPG Key ID: 06809324E4B2ABC1
1 changed files with 11 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
htdocs/fichinter/class/fichinterrec.class.php
View File

@ -562,7 +562,7 @@ class FichinterRec extends Fichinter
// phpcs:enable // phpcs:enable
if ($user->rights->fichinter->creer) { if ($user->rights->fichinter->creer) {
$sql = "UPDATE ".MAIN_DB_PREFIX."fichinter_rec "; $sql = "UPDATE ".MAIN_DB_PREFIX."fichinter_rec ";
$sql .= " SET frequency = '".$this->db->escape($freq)."', last_gen='".$this->db-escpae($courant)."'"; $sql .= " SET frequency = '".$this->db->escape($freq)."', last_gen='".$this->db-escape($courant)."'";
$sql .= " WHERE rowid = ".$this->id; $sql .= " WHERE rowid = ".$this->id;
$resql = $this->db->query($sql); $resql = $this->db->query($sql);
@ -580,14 +580,14 @@ class FichinterRec extends Fichinter
} }
/** /**
* Return clicable name (with picto eventually) * Return clicable name (with picto eventually)
* *
* @param int $withpicto Add picto into link * @param int $withpicto Add picto into link
* @param string $option Where point the link * @param string $option Where point the link
* @param int $max Maxlength of ref * @param int $max Maxlength of ref
* @param int $short 1=Return just URL * @param int $short 1=Return just URL
* @param string $moretitle Add more text to title tooltip * @param string $moretitle Add more text to title tooltip
* @return string String with URL * @return string String with URL
*/ */
public function getNomUrl($withpicto = 0, $option = '', $max = 0, $short = 0, $moretitle = '') public function getNomUrl($withpicto = 0, $option = '', $max = 0, $short = 0, $moretitle = '')
{ {
@ -605,8 +605,9 @@ class FichinterRec extends Fichinter
$link = '<a href="'.$url.'" title="'.dol_escape_htmltag($label, 1).'" class="classfortooltip">'; $link = '<a href="'.$url.'" title="'.dol_escape_htmltag($label, 1).'" class="classfortooltip">';
$linkend='</a>'; $linkend='</a>';
if ($withpicto) if ($withpicto) {
$result.=($link.img_object($label, $picto, 'class="classfortooltip"').$linkend); $result.= $link.img_object($label, $picto, 'class="classfortooltip"').$linkend;
}
if ($withpicto && $withpicto != 2) $result.=' '; if ($withpicto && $withpicto != 2) $result.=' ';
if ($withpicto != 2) $result.=$link.$this->ref.$linkend; if ($withpicto != 2) $result.=$link.$this->ref.$linkend;
return $result; return $result;