[Noalyss-commit] [noalyss] 13/19: Security : direct access to GLOBALS

[Dany De Bontridder]

sparkyx pushed a commit to branch master
in repository noalyss.

commit ed0d7bc30bf597fe8c9dc9ad1ad101069388fcf0
Author: Dany De Bontridder <address@hidden>
Date:   Mon Sep 9 08:12:34 2019 +0200

    Security : direct access to GLOBALS
---
 include/supplier.inc.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/include/supplier.inc.php b/include/supplier.inc.php
index acbd673..259ca12 100644
--- a/include/supplier.inc.php
+++ b/include/supplier.inc.php
@@ -56,7 +56,7 @@ if ( isset($_POST['action_fiche'] ) )
             return;
         }
 
-        $f_id=$_REQUEST['f_id'];
+        $f_id = $http->request('f_id','number');
 
         $fiche=new Supplier($cn,$f_id);
         $fiche->remove();
@@ -107,7 +107,7 @@ if ( $low_action == "list" )
                                                                      </div>
                                                                      <?php
                                                                      
$supplier=new Supplier($cn);
-    $search=(isset($_GET['query']))?$_GET['query']:"";
+    $search=$http->get("query","string","");
     $sql="";
     if (isset($_GET['cat']))
     {