diff --git a/htdocs/product/fiche.php b/htdocs/product/fiche.php index 4a53766fa81..4d4fa4ac2ce 100644 --- a/htdocs/product/fiche.php +++ b/htdocs/product/fiche.php @@ -79,7 +79,11 @@ if ($action == 'addinfacture') $facture = New Facture($db); $facture->fetch($HTTP_POST_VARS["factureid"]); - $facture->addline($HTTP_POST_VARS["factureid"], $product->label, $product->price, $HTTP_POST_VARS["qty"], $product->tva_tx, $id); + $facture->addline($HTTP_POST_VARS["factureid"], + addslashes($product->label), + $product->price, + $HTTP_POST_VARS["qty"], + $product->tva_tx, $id); $action = ''; $mesg = 'Produit ajouté ŕ la facture ';