iger
/
engelsystem
9
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

funktion_schichtplan_Tage.php: endlosscheliede bei nur einer schicht 

secure.php: filterung noict komplett


git-svn-id: svn://svn.cccv.de/engel-system@28 29ba0400-6e00-0410-a75a-ca02368028f8
This commit is contained in:
cookie 2005-11-09 16:05:28 +00:00
parent 7e5f4a3332
commit 1d219f5c77
2 changed files with 10 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
www-ssl/inc/funktion_schichtplan_Tage.php
View File

@ -56,11 +56,14 @@ do
$Erg2 = mysql_query($SQL2, $con); $Erg2 = mysql_query($SQL2, $con);
$DateE = substr(mysql_result($Erg2, 0 , 0), 0,10); $DateE = substr(mysql_result($Erg2, 0 , 0), 0,10);
while( $DateS != $DateE) if( strlen($DateE) == 0)
{ $DateE = $DateS;
$DateS = DatumUm1TagErhoehen( $DateS); else
$VeranstaltungsTage[$Pos++] = $DateS; while( $DateS != $DateE)
} {
$DateS = DatumUm1TagErhoehen( $DateS);
$VeranstaltungsTage[$Pos++] = $DateS;
}
//suchen den nästen eintrag //suchen den nästen eintrag
$SQL = "SELECT `DateS` FROM `Shifts` ". $SQL = "SELECT `DateS` FROM `Shifts` ".

2
www-ssl/inc/secure.php
View File

@ -10,7 +10,7 @@ foreach ($_GET as $k => $v)
$v = htmlspecialchars($v); $v = htmlspecialchars($v);
$v = mysql_escape_string($v); $v = mysql_escape_string($v);
// $v = htmlentities($v); // $v = htmlentities($v);
if (preg_match('/([\"`])/', $v, $match)) if (preg_match('/([\'"`\'])/', $v, $match))
{ {
print "sorry get has illegal char '$match[1]'"; print "sorry get has illegal char '$match[1]'";
exit; exit;