// php noti

This commit is contained in:
Rémi Gaillard
2013-08-29 18:15:51 +02:00
parent 08b8277a7a
commit eec8aaa4f8
+3 -3
View File
@@ -387,7 +387,7 @@ class AdminControllerCore extends Controller
$filter = ''; $filter = '';
foreach ($this->fields_list AS $field => $t) foreach ($this->fields_list AS $field => $t)
{ {
if ($val = htmlspecialchars(Tools::getValue($this->table.'Filter_'.$field), ENT_QUOTES, 'UTF-8')) if ($val = Tools::getValue($this->table.'Filter_'.$field))
{ {
if(!is_array($val) && !empty($val)) if(!is_array($val) && !empty($val))
$filter .= ($filter ? ', ' : $this->l(' filter by ')).$t['title'].' : '; $filter .= ($filter ? ', ' : $this->l(' filter by ')).$t['title'].' : ';
@@ -395,13 +395,13 @@ class AdminControllerCore extends Controller
if (isset($t['type']) && $t['type'] == 'bool') if (isset($t['type']) && $t['type'] == 'bool')
$filter .= ((bool)$val) ? $this->l('yes') : $this->l('no'); $filter .= ((bool)$val) ? $this->l('yes') : $this->l('no');
elseif(is_string($val)) elseif(is_string($val))
$filter .= $val; $filter .= htmlspecialchars($val, ENT_QUOTES, 'UTF-8');
elseif(is_array($val)) elseif(is_array($val))
{ {
$tmp = ''; $tmp = '';
foreach($val as $v) foreach($val as $v)
if(is_string($v) && !empty($v)) if(is_string($v) && !empty($v))
$tmp .= ' - '.$v; $tmp .= ' - '.htmlspecialchars($v, ENT_QUOTES, 'UTF-8');
if(Tools::strlen($tmp)) if(Tools::strlen($tmp))
{ {
$tmp = ltrim($tmp, ' - '); $tmp = ltrim($tmp, ' - ');