From 40ce13debed913b77b30a831df479f39bb2e8ca3 Mon Sep 17 00:00:00 2001
From: Rodolphe Quiedeville <rodolphe@quiedeville.org>
Date: Fri, 24 Dec 2004 13:22:56 +0000
Subject: [PATCH] Strip les quotes du nom
---
htdocs/comm/clients.php | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/htdocs/comm/clients.php b/htdocs/comm/clients.php
index aa0b7779f77..6d1f29b1dbb 100644
--- a/htdocs/comm/clients.php
+++ b/htdocs/comm/clients.php
@@ -107,7 +107,7 @@ if ($result)
print '<form method="get" action="clients.php">';
print '<tr class="liste_titre">';
print '<td valign="right">';
- print '<input type="text" name="search_nom" value="'.$_GET["search_nom"].'">';
+ print '<input type="text" name="search_nom" value="'.stripslashes($_GET["search_nom"]).'">';
print '</td><td valign="right">';
print '<input type="text" name="search_code" value="'.$_GET["search_code"].'">';
print '</td><td colspan="2"><input type="submit">';
@@ -125,7 +125,7 @@ if ($result)
print "<tr $bc[$var]>";
print '<td><a href="fiche.php?socid='.$obj->idp.'">';
print img_file();
- print "</a> <a href=\"fiche.php?socid=$obj->idp\">$obj->nom</A></td>\n";
+ print "</a> <a href=\"fiche.php?socid=$obj->idp\">".stripslashes($obj->nom)."</A></td>\n";
print "<td>".$obj->code_client." </td>\n";
print "<td>".$obj->ville." </td>\n";
print '<td><a href="'.DOL_URL_ROOT.'/dossier/client/fiche.php?id='.$obj->idp.'">';
--
GitLab