Wavyzz/dolibarr
2
0
Fork 1
mirror of https://github.com/Dolibarr/dolibarr.git synced 2026-02-07 16:41:48 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix : Warning: Undefined array key "help" in /home/httpd/vhosts/aflac.fr/domains/dol190.aflac.fr/httpdocs/admin/dict.php on line 1810 (#29642)

Browse Source 
* fix : Warning: Undefined variable  in /home/httpd/vhosts/aflac.fr/domains/dol190.aflac.fr/httpdocs/compta/bank/various_payment/list.php on line 370

* backward

* update

* fix : Warning: Undefined array key help in /home/httpd/vhosts/aflac.fr/domains/dol190.aflac.fr/httpdocs/admin/dict.php on line 1810

* fix typo in extrafields.class.php
This commit is contained in:
Philippe Grand
2024-05-10 01:25:35 +02:00
committed by GitHub
parent 0cce9ac3c0
commit 0fcbdcb408
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/core/class/extrafields.class.php
View File

@@ -1589,7 +1589,7 @@ class ExtraFields
} elseif ($type == 'link') {
$param_list = array_keys($param['options']); // $param_list[0] = 'ObjectName:classPath' but can also be 'ObjectName:classPath:1:(status:=:1)'
/* Removed.
The selectForForms is called with parameter $objectfield defined, so the app can retreive the filter inside the ajax component instead of being provided as parameters. The
The selectForForms is called with parameter $objectfield defined, so the app can retrieve the filter inside the ajax component instead of being provided as parameters. The
filter was used to pass SQL requests leading to serious SQL injection problem. This should not be possible. Also the call of the ajax was broken by some WAF.
if (strpos($param_list[0], '$ID$') !== false && !empty($objectid)) {
$param_list[0] = str_replace('$ID$', $objectid, $param_list[0]);