Skip to content

I
intranet-invoices
Commit b6c32447 authored by Frank Bergmann's avatar Frank Bergmann
Browse files
Options

- Improved security: Removed most [ns_conn form] calls in the system.

parent 4b20fa08
Hide whitespace changes
Inline Side-by-side
Showing with 2 additions and 5 deletions
www/new-cost-center-select.tcl
View file @ b6c32447
...@@ -49,13 +49,10 @@ set bgcolor(1) " class=roweven" ...@@ -49,13 +49,10 @@ set bgcolor(1) " class=roweven"
# from the HTTP session. # from the HTTP session.
# ----------------------------------------------------------- # -----------------------------------------------------------
set form_vars [ns_conn form]
set pass_through_html "" set pass_through_html ""
foreach var $pass_through_variables { foreach var $pass_through_variables {
set value [ns_set get $form_vars $var] set value [im_opt_val -limit_to nohtml $var]
append pass_through_html " append pass_through_html "<input type=hidden name=\"$var\" value=\"[ns_quotehtml $value]\">\n"
<input type=hidden name=\"$var\" value=\"[ns_quotehtml $value]\">
"
} }
# --------------------------------------------------------------- # ---------------------------------------------------------------
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment