diff --git a/htdocs/fichinter/fiche.php b/htdocs/fichinter/fiche.php index 31b69836b50a797337e703ea0a15ef7e13debeec..beae197579b5367667348d7efbab631f4fda567b 100644 --- a/htdocs/fichinter/fiche.php +++ b/htdocs/fichinter/fiche.php @@ -654,7 +654,7 @@ if ($action == 'create') if ($socid > 0) { $soc->fetch($socid); - + print '<form name="fichinter" action="'.$_SERVER['PHP_SELF'].'" method="POST">'; print '<input type="hidden" name="token" value="'.$_SESSION['newtoken'].'">'; @@ -668,7 +668,7 @@ if ($action == 'create') // Ref print '<tr><td class="fieldrequired">'.$langs->trans("Ref").'</td>'; print '<td><input name="ref" value="'.$numpr.'"></td></tr>'."\n"; - + // Description (must be a textarea and not html must be allowed (used in list view) print '<tr><td valign="top">'.$langs->trans("Description").'</td>'; print '<td>'; @@ -696,14 +696,14 @@ if ($action == 'create') $liste=ModelePDFFicheinter::liste_modeles($db); print $form->selectarray('model',$liste,$conf->global->FICHEINTER_ADDON_PDF); print "</td></tr>"; - + // Public note print '<tr>'; print '<td class="border" valign="top">'.$langs->trans('NotePublic').'</td>'; print '<td valign="top" colspan="2">'; print '<textarea name="note_public" cols="80" rows="'.ROWS_3.'"></textarea>'; print '</td></tr>'; - + // Private note if (! $user->societe_id) { @@ -745,7 +745,7 @@ else if ($id > 0 || ! empty($ref)) /* * Affichage en mode visu */ - + $object->fetch($id, $ref); $object->fetch_thirdparty(); @@ -866,13 +866,13 @@ else if ($id > 0 || ! empty($ref)) // Statut print '<tr><td>'.$langs->trans("Status").'</td><td>'.$object->getLibStatut(4).'</td></tr>'; - + // Public note print '<tr><td valign="top">'.$langs->trans("NotePublic").'</td>'; print '<td valign="top" colspan="3">'; print $form->editInPlace($object->note_public, 'note_public', $user->rights->ficheinter->creer, 'textarea'); print "</td></tr>"; - + // Private note if (! $user->societe_id) { @@ -922,7 +922,7 @@ else if ($id > 0 || ! empty($ref)) print '<tr '.$bc[$var].'>'; print '<td>'; print '<a name="'.$objp->rowid.'"></a>'; // ancre pour retourner sur la ligne - print nl2br($objp->description); + print dol_htmlentitiesbr($objp->description); // Date print '<td align="center" width="150">'.dol_print_date($db->jdate($objp->date_intervention),'dayhour').'</td>';