admin/Facilitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

FSN#33730 SQL-injection op id-parameter verholpen

Browse Source 
svn path=/Website/trunk/; revision=26232
This commit is contained in:
Jos Groot Lipman
2015-09-09 09:49:48 +00:00
parent 11a04470fd
commit 08034a6a0f
6 changed files with 12 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
APPL/SCF/scaffolding_m_list.inc
View File

@@ -73,7 +73,7 @@ function scaffolding_m_list(model, scf_params)
buttons.push({ icon: "plus.png", title: L("lcl_add"), action: "FcltMgr.openDetail('" + addurl + "', '" + L("lcl_add") + " " + model.record_title + "')" });
}
var xxx_params = { filter : scf_params.filter || shared.qs2json(), columns: scf_params.list.columns, groupby: scf_params.list.groupby };
var xxx_params = { filter : scf_params.filter || shared.qs2json(model), columns: scf_params.list.columns, groupby: scf_params.list.groupby };
var xxx_array = model.REST_GET(xxx_params);
function fnHeader(oRs)