[Noalyss-commit] [noalyss] 12/20: protect variable

[Dany De Bontridder]

sparkyx pushed a commit to branch master
in repository noalyss.

commit a44e613bb7055a0758b9d19262fb932099e538e1
Author: Dany De Bontridder <address@hidden>
Date:   Sat Oct 24 15:18:05 2015 +0200

    protect variable
---
 include/action.common.inc.php |    6 +++++-
 1 files changed, 5 insertions(+), 1 deletions(-)

diff --git a/include/action.common.inc.php b/include/action.common.inc.php
index 09b0ed2..06825c1 100644
--- a/include/action.common.inc.php
+++ b/include/action.common.inc.php
@@ -94,7 +94,11 @@ if (isset($_POST['generate']))
        {
                $act->Update();
        }
-       $act->generate_document($_POST['doc_mod'], $_POST);
+        $doc_mod=HtmlInput::default_value_post('doc_mod', "-1");
+        if ( $doc_mod == "-1") {
+            throw new Exception(_('Donnée invalide'));
+        }
+       $act->generate_document($doc_mod, $_POST);
        $sub_action = 'detail';
 }
 /* for delete  */