admin/Facilitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FSN#33730 SQL-injection op id-parameter verholpen

Browse Source 
svn path=/Website/trunk/; revision=26232
This commit is contained in:
Jos Groot Lipman
2015-09-09 09:49:48 +00:00
parent 11a04470fd
commit 08034a6a0f
6 changed files with 12 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
APPL/SCF/scaffolding_edit.inc
View File

@@ -43,7 +43,7 @@ function scaffolding_edit(model, scf_params)
// Defaults vanuit url maken we readonly
// Vooral bij includes wordt hier ook de parent_key verwijzing gezet
var filter = shared.qs2json()
var filter = shared.qs2json(model)
for (var fld in model.fields)
{
var field = model.fields[fld];
@@ -57,7 +57,7 @@ function scaffolding_edit(model, scf_params)
xxx_data = {};
// Defaults vanuit url invullen
// Bij includes wordt hier ook de parent_key verwijzing gezet
var filter = scf_params.filter || shared.qs2json()
var filter = scf_params.filter || shared.qs2json(model)
for (var fld in model.fields)
{
var field = model.fields[fld];