From 2ee07bb0494bf5a95e33c6f1cfed5bbcd2271554 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?No=C3=A9?= <noe@scopen.fr>
Date: Thu, 4 Dec 2025 17:27:57 +0100
Subject: [PATCH] FIX: Remove <?=

---
 htdocs/takepos/index.php | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/htdocs/takepos/index.php b/htdocs/takepos/index.php
index bafe040f50c..72b99dd1504 100644
--- a/htdocs/takepos/index.php
+++ b/htdocs/takepos/index.php
@@ -334,8 +334,8 @@ function LoadProducts(position, issubcat) {
 
 	// Get socid
 	let socid = jQuery('#thirdpartyid').val();
-	if ((socid === undefined || socid === "") && parseInt("<?php echo $socid ?>") > 0) {
-		socid = parseInt("<?= $socid ?>");
+	if ((socid === undefined || socid === "") && parseInt("<?php echo dol_escape_js($socid) ?>") > 0) {
+		socid = parseInt("<?php echo dol_escape_js($socid); ?>");
 	}
 
 	// Only show products for sale (tosell=1)
@@ -449,8 +449,8 @@ function MoreProducts(moreorless) {
 
 	// Get socid
 	let socid = jQuery('#thirdpartyid').val();
-	if ((socid === undefined || socid === "") && parseInt("<?php echo $socid ?>") > 0) {
-		socid = parseInt("<?= $socid ?>");
+	if ((socid === undefined || socid === "") && parseInt("<?php echo dol_escape_js($socid) ?>") > 0) {
+		socid = parseInt("<?php echo dol_escape_js($socid); ?>");
 	}
 
 	// Only show products for sale (tosell=1)
@@ -681,8 +681,8 @@ function Search2(keyCodeForEnter, moreorless) {
 
 			// Only show products for sale (tosell=1)
 			let socid = jQuery('#thirdpartyid').val();
-			if ((socid === undefined || socid === "") && parseInt("<?php echo $socid ?>") > 0) {
-				socid = parseInt("<?= $socid ?>");
+			if ((socid === undefined || socid === "") && parseInt("<?php echo dol_escape_js($socid) ?>") > 0) {
+				socid = parseInt("<?php echo dol_escape_js($socid); ?>");
 			}
 
 			$.getJSON('<?php echo DOL_URL_ROOT ?>/takepos/ajax/ajax.php?action=search&token=<?php echo newToken();?>&term=' + search_term + '&thirdpartyid=' + socid + '&search_start=' + search_start + '&search_limit=' + search_limit, function (data) {