Wavyzz/dolibarr
2
0
Fork 1
mirror of https://github.com/Dolibarr/dolibarr.git synced 2025-12-21 00:41:29 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge v22

Browse Source
This commit is contained in:
Laurent Destailleur
2025-12-06 05:06:24 +01:00
parent 418188f37b 8f99ea3e67
commit f7114175ab
5 changed files with 16 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
htdocs/core/lib/files.lib.php
View File

@@ -3485,6 +3485,7 @@ function dol_check_secure_access_document($modulepart, $original_file, $entity,
if ($fuser->hasRight('fournisseur', 'facture', $lire) || preg_match('/^specimen/i', $original_file)) {
$accessallowed = 1;
}
$original_file = preg_replace("/payment\//", "", $original_file); // Because the $conf->fournisseur->payment->dir_output already contains the "payment/"
$original_file = $conf->fournisseur->payment->dir_output.'/'.$original_file;
$sqlprotectagainstexternals = "SELECT fk_soc as fk_soc FROM ".MAIN_DB_PREFIX."paiementfournisseur WHERE ref='".$db->escape($refname)."' AND entity=".$conf->entity;
} elseif ($modulepart == 'payment') {