[Phpcompta-dev] r4864 - phpcompta/trunk/include

[phpcompta-dev]

Author: danydb
Date: 2012-06-06 13:11:35 +0200 (Wed, 06 Jun 2012)
New Revision: 4864

Modified:
   phpcompta/trunk/include/class_follow_up.php
   phpcompta/trunk/include/export_follow_up_csv.php
Log:
we use $_REQUEST['query'] instead of $_GET['query']. Need to check if it is 
valid

Modified: phpcompta/trunk/include/class_follow_up.php
===================================================================
--- phpcompta/trunk/include/class_follow_up.php 2012-06-05 20:16:57 UTC (rev 
4863)
+++ phpcompta/trunk/include/class_follow_up.php 2012-06-06 11:11:35 UTC (rev 
4864)
@@ -1159,6 +1159,7 @@
 
        /**
         * Get date from $_GET and create the sql stmt for the query
+        * @note the query is taken in $_REQUEST
         * @see Follow_Up::ShowActionList
         * @return string SQL condition
         */
@@ -1169,6 +1170,10 @@
 
                extract($p_array);
                $query = "";
+               /**
+                address@hidden check why we need to use $_REQUEST['query']
+                * instead of $_GET['query']
+                */
                if (isset($_REQUEST['query']))
                {
                        // if a query is request build the sql stmt
@@ -1181,9 +1186,8 @@
                $str = "";
                if (isset($qcode))
                {
-
                        // verify that qcode is not empty
-                       if (strlen(trim($_REQUEST['qcode'])) != 0)
+                       if (strlen(trim($qcode)) != 0)
                        {
 
                                $fiche = new Fiche($cn);

Modified: phpcompta/trunk/include/export_follow_up_csv.php
===================================================================
--- phpcompta/trunk/include/export_follow_up_csv.php    2012-06-05 20:16:57 UTC 
(rev 4863)
+++ phpcompta/trunk/include/export_follow_up_csv.php    2012-06-06 11:11:35 UTC 
(rev 4864)
@@ -32,6 +32,8 @@
 header('Content-Disposition: attachment;filename="action-gestion.csv"',FALSE);
 
 $follow=new Follow_Up($cn);
+$array=$_GET;
+if ( isset ($_POST['query']) ) $p_array['query']=$_POST['query'];
 
 echo $follow->export_csv($_GET);
 



---
PhpCompta est un logiciel de comptabilité libre en ligne (full web)
Projet opensource http://www.phpcompta.eu