Author: danydb
Date: 2012-01-09 12:28:48 +0100 (Mon, 09 Jan 2012)
New Revision: 4686

Modified:
   phpcompta/trunk/include/class_fiche_attr.php
Log:
V?\195?\169rifie que ad_extra contient un SQL valide

Modified: phpcompta/trunk/include/class_fiche_attr.php
===================================================================
--- phpcompta/trunk/include/class_fiche_attr.php        2012-01-09 11:22:20 UTC 
(rev 4685)
+++ phpcompta/trunk/include/class_fiche_attr.php        2012-01-09 11:28:48 UTC 
(rev 4686)
@@ -82,6 +82,14 @@
             case 'zone':
                 $this->ad_size=22;
                 break;
+            case 'select':
+                $this->ad_size=22;
+                try{
+                    $a=$this->cn->exec_sql($this->ad_extra);
+                }catch (Exception $e)
+                {
+                    throw new Exception ("La requĂȘte SQL est invalide ");
+                }
             default:
                 $this->ad_size=22;
             }
@@ -89,6 +97,7 @@
     }
     public function save()
     {
+       
         /* please adapt */
         if (  $this->ad_id == 0 )
             $this->insert();


_______________________________________________
Phpcompta-dev mailing list
[email protected]
https://lists.nongnu.org/mailman/listinfo/phpcompta-dev

Reply via email to