dolibarr/htdocs/ecm
MDW c4d2833421
fix: Replace db->escape with db->sanitize in SQL query construction (#39357)
Replaced all instances of `$this->db->escape($filtermode)` with `$this->db->sanitize($filtermode)` in SQL query construction across multiple classes to ensure proper SQL sanitization and prevent potential SQL injection vulnerabilities.
2026-08-04 18:40:04 +02:00
..
ajax Qual: Fix 'SqlInjection' notices (#39232) 2026-08-01 23:54:52 +02:00
class fix: Replace db->escape with db->sanitize in SQL query construction (#39357) 2026-08-04 18:40:04 +02:00
tpl Fix module param must be sanitized with aZ09arobase - reported by Davide 2026-07-24 07:37:34 +02:00
dir_add_card.php Fix module param must be sanitized with aZ09arobase - reported by Davide 2026-07-24 07:37:34 +02:00
dir_card.php Fix deletion must not use the glob by default. 2026-07-29 13:20:28 +02:00
file_card.php Fix module param must be sanitized with aZ09arobase - reported by Davide 2026-07-24 07:37:34 +02:00
file_note.php clean code (#38394) 2026-05-22 21:17:48 +02:00
index.php Fix deletion must not use the glob by default. 2026-07-29 13:20:28 +02:00
index_auto.php Fix deletion must not use the glob by default. 2026-07-29 13:20:28 +02:00
index_medias.php Qual: Fix 'SqlInjection' notices (#39230) 2026-07-20 15:28:26 +02:00
search.php Fix module param must be sanitized with aZ09arobase - reported by Davide 2026-07-24 07:37:34 +02:00