Changeset 728 for trunk/phpbms/common

Timestamp:

01/07/10 12:45:17 (2 years ago)

Author:

brieb

Message:

• Fixed possible security loopholes in search screen (SQL Manipulation)

Files:

• trunk/phpbms/common/javascript/queryfunctions.js (modified) (2 diffs)

trunk/phpbms/common/javascript/queryfunctions.js

@@ -77 +77 @@
                 } else
                     ctrlkeydown = theevent.metaKey;
-                    
+
                 shiftkeydown=theevent.shiftKey;
         }
@@ -610 +610 @@
 }
 
-function LSRunSearch(){
-        var sqlbox=getObjectFromID("LSSQL");
-        var advancedsearch=getObjectFromID("advancedsearch");
-        advancedsearch.value=sqlbox.value
-        advancedsearch.form.submit();
-}
 function LSDeleteSearch(base){
         var theselect=getObjectFromID("LSList");