[Dolibarr-bugtrack] [bug #15823] addslashes manquant dans le script /admin/external_rss.php

[LO Vieng Nong]

URL:
  <http://savannah.nongnu.org/bugs/?func=detailitem&item_id=15823>

                 Summary: addslashes manquant dans le script
/admin/external_rss.php
                 Project: Dolibarr
            Submitted by: bugblaster
            Submitted on: lun 20.02.2006 à 23:25
                Severity: 3 - Normal
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
                 Release: None
        Platform Version: GNU/Linux

    _______________________________________________________

Details:

addslashes manquant dans le script
impossible de mettre un titre avec '

        $sql1 = "INSERT INTO ".MAIN_DB_PREFIX."const (name,value,visible)
VALUES ('EXTERNAL_RSS_TITLE_" . $_POST[\
"norss"] . "','".addslashes($_POST[$external_rss_title])."',0) ;";
        $sql2 = "INSERT INTO ".MAIN_DB_PREFIX."const (name,value,visible)
VALUES ('EXTERNAL_RSS_URLRSS_" . $_POST\
["norss"] . "','".addslashes($_POST[$external_rss_urlrss])."',0) ;";

ces deux lignes apparaissent deux fois


-------------
Version: 2.1-alpha
Server: Apache/2.0.51 (Fedora)
Url: /admin/external_rss.php







    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?func=detailitem&item_id=15823>

_______________________________________________
  Message posté via/par Savannah
  http://savannah.nongnu.org/