Changeset 720 for trunk/phpbms/search.php

Timestamp:

01/06/10 17:04:26 (2 years ago)

Author:

brieb

Message:

• fixed checkunique breaking with uuids and possible SQL injection
• fixed backslashes in searches
• fixed mark_as in invoice search commands incorrectly setting value to string 'NULL'

Files:

• trunk/phpbms/search.php (modified) (3 diffs)

trunk/phpbms/search.php

@@ -49 +49 @@
         //initialize the object
         $displayTable->initialize($_GET["id"]);
-        
-        if (isset($passedjoinclause)) $_SESSION["passedjoinclause"] = $passedjoinclause; 
-        if (isset($passedjoinwhere)) $_SESSION["passedjoinwhere"] = $passedjoinwhere; 
+
+        if (isset($passedjoinclause)) $_SESSION["passedjoinclause"] = $passedjoinclause;
+        if (isset($passedjoinwhere)) $_SESSION["passedjoinwhere"] = $passedjoinwhere;
 
 
@@ -121 +121 @@
 
                         }//endif
-                        
+
                         /**
-                          *  If the command is a push command, include tables.php 
+                          *  If the command is a push command, include tables.php
                           */
                         if(strpos($functionname, ":") !== false)
                                 include("include/tables.php");
-                        
+
                         //try to include table specific functions
                         if(file_exists("modules/".$displayTable->thetabledef["name"]."/include/".$displayTable->thetabledef["maintable"].".php"))
@@ -142 +142 @@
 
                         if(!preg_match("/\:/", $functionname)){
-                                
+
                                 if(method_exists($searchFunctions,$functionname))
                                         $statusmessage = $searchFunctions->$functionname();
                                 else
                                         $statusmessage = "Function ".$functionname." not defined";
-                                        
+
                         }else{
-                                
+
                                 if(moduleExists("mod:b2d42220-443b-fe74-dbdb-ed2c0968c38c", $phpbms->modules))
                                         $statusmessage = $searchFunctions->runPush($therecord["name"]);
-                                
+
                         }//end if
                         break;