lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

FIX CVE-2018-19993

Browse Source
This commit is contained in:
Laurent Destailleur 2018-12-22 16:59:30 +01:00
parent 0f06e39d23
commit fc3fcc5455
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
htdocs/public/notice.php
View File

@ -1,5 +1,5 @@
<?php <?php
/* Copyright (C) 2016 Laurent Destailleur <eldy@users.sourceforge.net> /* Copyright (C) 2016-2018 Laurent Destailleur <eldy@users.sourceforge.net>
* *
* This program is free software; you can redistribute it and/or modify * This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by * it under the terms of the GNU General Public License as published by
@ -19,13 +19,13 @@
* \file htdocs/public/notice.php * \file htdocs/public/notice.php
* \brief Dolibarr page to show a notice. * \brief Dolibarr page to show a notice.
* Default notice is a message to say network connection is off. * Default notice is a message to say network connection is off.
* You can also call this page with URL: * You can also call this page with URL:
* /public/notice.php?lang=xx_XX&transkey=translation_key (key must be inside file main.lang, error.lang or other.lang) * /public/notice.php?lang=xx_XX&transkey=translation_key (key must be inside file main.lang, error.lang or other.lang)
* /public/notice.php?transphrase=url_encoded_sentence_to_show * /public/notice.php?transphrase=url_encoded_sentence_to_show
*/ */
define('NOCSRFCHECK',1); define('NOCSRFCHECK',1);
define('NOLOGIN',1); define('NOLOGIN',1);
require '../main.inc.php'; require '../main.inc.php';
@ -34,7 +34,7 @@ require '../main.inc.php';
* View * View
*/ */
if (! GETPOST('transkey') && ! GETPOST('transphrase')) if (! GETPOST('transkey','alphanohtml') && ! GETPOST('transphrase','alphanohtml'))
{ {
print 'Sorry, it seems your internet connexion is off.<br>'; print 'Sorry, it seems your internet connexion is off.<br>';
print 'You need to be connected to network to use this software.<br>'; print 'You need to be connected to network to use this software.<br>';
@ -43,8 +43,8 @@ else
{ {
$langs->load("error"); $langs->load("error");
$langs->load("other"); $langs->load("other");
if (GETPOST('transphrase')) print GETPOST('transphrase'); if (GETPOST('transphrase','alphanohtml')) print GETPOST('transphrase','alphanohtml');
if (GETPOST('transkey')) print $langs->trans(GETPOST('transkey')); if (GETPOST('transkey','alphanohtml')) print $langs->trans(GETPOST('transkey','alphanohtml'));
} }