Wavyzz/dolibarr-fork
2
0
Fork 0
forked from Wavyzz/dolibarr
Code Pull Requests Activity

Fix escaping

Browse Source
This commit is contained in:
Laurent Destailleur
2020-09-20 02:30:53 +02:00
parent fa86b62198
commit f57b4fd2fd
19 changed files with 74 additions and 72 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
htdocs/fourn/commande/list.php
View File

@@ -294,9 +294,9 @@ if (empty($reshook))
$sql .= ", targettype";
$sql .= ") VALUES (";
$sql .= $id_order;
$sql .= ", '".$object->origin."'";
$sql .= ", '".$db->escape($object->origin)."'";
$sql .= ", ".$object->id;
$sql .= ", '".$object->element."'";
$sql .= ", '".$db->escape($object->element)."'";
$sql .= ")";
if (!$db->query($sql))