Wavyzz/dolibarr-fork
2
0
Fork 0
forked from Wavyzz/dolibarr
Code Pull Requests Activity

Fight against $_POST

Browse Source
This commit is contained in:
Laurent Destailleur
2020-02-16 19:33:58 +01:00
parent 52aebce789
commit f4f3efec62
41 changed files with 117 additions and 129 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/fourn/commande/dispatch.php
View File

@@ -273,7 +273,7 @@ if ($action == 'dispatch' && $user->rights->fournisseur->commande->receptionner)
if (empty($conf->multicurrency->enabled) && empty($conf->dynamicprices->enabled)) {
$dto = GETPOST("dto_".$reg[1].'_'.$reg[2]);
//update supplier price
if (isset($_POST[$saveprice])) {
if (GETPOSTISSET($saveprice)) {
// TODO Use class
$sql = "UPDATE ".MAIN_DB_PREFIX."product_fournisseur_price";
$sql .= " SET unitprice='".GETPOST($pu)."'";