Skip to content

I
intranet-wall
Commit efb8bcd5 authored by Frank Bergmann's avatar Frank Bergmann
Browse files
Options

- Improved security: Removed most [ns_conn form] calls in the system.

parent 07e5c056
Hide whitespace changes
Inline Side-by-side
Showing with 2 additions and 3 deletions
www/index.tcl
View file @ efb8bcd5
...@@ -82,7 +82,7 @@ set substitution_list [list \ ...@@ -82,7 +82,7 @@ set substitution_list [list \
set form_vars [ns_conn form] set form_vars [ns_conn form]
foreach form_var [ad_ns_set_keys $form_vars] { foreach form_var [ad_ns_set_keys $form_vars] {
set form_val [ns_set get $form_vars $form_var] set form_val [im_opt_val -limit_to nohtml $form_var]
lappend substitution_list $form_var lappend substitution_list $form_var
lappend substitution_list $form_val lappend substitution_list $form_val
} }
......
www/modified-tasks.tcl
View file @ efb8bcd5
...@@ -80,7 +80,6 @@ switch $perspective { ...@@ -80,7 +80,6 @@ switch $perspective {
set wall_sql [db_string wall "select report_sql from im_reports where report_code = 'wall_new_project_task'"] set wall_sql [db_string wall "select report_sql from im_reports where report_code = 'wall_new_project_task'"]
set substitution_list [list \ set substitution_list [list \
user_id $current_user_id \ user_id $current_user_id \
wall_date $wall_date \ wall_date $wall_date \
...@@ -88,7 +87,7 @@ set substitution_list [list \ ...@@ -88,7 +87,7 @@ set substitution_list [list \
set form_vars [ns_conn form] set form_vars [ns_conn form]
foreach form_var [ad_ns_set_keys $form_vars] { foreach form_var [ad_ns_set_keys $form_vars] {
set form_val [ns_set get $form_vars $form_var] set form_val [im_opt_val -limit_to nohtml $form_var]
lappend substitution_list $form_var lappend substitution_list $form_var
lappend substitution_list $form_val lappend substitution_list $form_val
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment