View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0000450 | NOALYSS | General | public | 2011-11-14 14:23 | 2012-02-02 13:25 |
| Reporter | danydb | Assigned To | danydb | ||
| Priority | normale | Severity | mineur | Reproducibility | sans objet |
| Status | fermé | Resolution | corrigé | ||
| Target Version | 6.0 | Fixed in Version | 6.0 | ||
| Summary | 0000450: Sécurité ajax : utiliser les actions | ||||
| Description | Rajouter les actions 00026 define ("PARFIC",1120); //Catégorie des fiches 00028 define ("PARCATDOC",1135); //Add Document category 00025 define ("PARPER",1110); //Ajout de période 00005 define('CAOD',235); // Ajout d'OD 00038 define ("PARSTR",1210); //Mode strict 00043 define ("STOWRITE",1510); //Stock (changement) | ||||
| Additional Information | Voir où elles sont utilisées dans la version rel560 et les utilisez aux mêmes endroits. Renommer fichier inclu pour l'ajax dans : * ajax_misc.php + parfois sécurité 469 require_once('modify_mod_document.inc.php'); 472 require_once('modify_periode.inc.php'); 475 require_once('modify_periode.inc.php'); 476 require_once('modify_predf_op.php'); 477 require_once('save_predf_op.php'); 491 require_once("show_profile.inc.php") 494 require_once("detail_menu.inc.php"); 497 require_once 'template/add_menu.php'; 506 require_once 'template/plugin_detail.php'; | ||||
| Tags | No tags attached. | ||||
| Extension Noalyss | |||||
|
|
Renommage des fichiers pour ajax ================================ 469 require_once('modify_mod_document.inc.php') => ajax_mod_document.php 472 require_once('modify_periode.inc.php'); => ajax_mod_periode.php 475 require_once('modify_periode.inc.php'); 476 require_once('modify_predf_op.php'); => ajax_mod_predf_op.php 477 require_once('save_predf_op.php'); => ajax_save_predf_op.php 491 require_once("show_profile.inc.php") => ajax_get_profile.php 494 require_once("detail_menu.inc.php"); => ajax_get_menu_detail.php 497 require_once 'template/add_menu.php'; => ajax_add_menu.php 506 require_once 'template/plugin_detail.php'; => ajax_plugin_detail.php |
|
|
Version publiée |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2011-11-14 14:23 | danydb | New Issue | |
| 2011-11-14 14:29 | danydb | Target Version | => Next Release |
| 2011-11-14 14:29 | danydb | Description Updated | |
| 2011-11-14 14:53 | danydb | Description Updated | |
| 2011-11-14 14:53 | danydb | Steps to Reproduce Updated | |
| 2011-11-14 14:53 | danydb | Additional Information Updated | |
| 2011-11-15 10:50 | danydb | Note Added: 0000787 | |
| 2011-11-15 11:42 | danydb | Status | new => resolved |
| 2011-11-15 11:42 | danydb | Fixed in Version | => Next Release |
| 2011-11-15 11:42 | danydb | Resolution | open => fixed |
| 2011-11-15 11:42 | danydb | Assigned To | => danydb |
| 2012-01-23 12:00 | danydb | Fixed in Version | Next Release => 6.0 |
| 2012-01-23 12:00 | danydb | Target Version | Next Release => 6.0 |
| 2012-02-02 13:25 | danydb | Note Added: 0000917 | |
| 2012-02-02 13:25 | danydb | Status | resolved => closed |
