MDW
1693f8a8a4
Qual: Fix 'SqlInjection' notices ( #39216 )
...
* Qual: Fix 'SqlInjection' notices
# Qual: Fix 'SqlInjection' notices
Batch of 25 files with changes to fix 'SqlInjection' Notices
* Qual: Enhance SQL injection prevention in CodingPhpTest.php
Improved the SQL injection prevention mechanism in the CodingPhpTest.php file by adding a check for integer and float casts in the IN clause of SQL queries to avoid false positives.
---------
Co-authored-by: Laurent Destailleur <eldy@destailleur.fr>
2026-07-23 19:06:39 +02:00
Laurent Destailleur
0d414fcb51
Merge branch '23.0' of git@github.com:Dolibarr/dolibarr.git into develop
2026-07-18 16:17:03 +02:00
Laurent Destailleur
19991c8ffa
Sec: sql injection via api in POST of thirdparties/id/banckaccount - reported by MDnyn
2026-07-18 02:48:07 +02:00
MDW
03319e88c9
Qual: Improve some CodingPhpTest notices with line numbers ( #39176 )
...
* Qual: Improve a notice with line numbers
* Qual: Fix PHPStan ci when no files are to be analyzed
2026-07-15 00:38:28 +02:00
Laurent Destailleur
c83382b53a
CI
2026-06-20 17:37:51 +02:00
Laurent Destailleur
ebbece26a0
Fix travis
2026-06-10 16:51:46 +02:00
Laurent Destailleur
91bffecfe3
Fix travis
2026-05-07 09:36:02 +02:00
Laurent Destailleur
0c661b173d
Clean code
2026-04-14 19:23:50 +02:00
Laurent Destailleur
c2db7a3220
Clean code
2026-04-14 18:40:54 +02:00
Laurent Destailleur
b3d355885a
Clean code
2026-04-14 17:57:48 +02:00
Laurent Destailleur
a7527e67e8
Clean code
2026-04-03 22:39:18 +02:00
Laurent Destailleur
8012822e81
Clean code. Must use USF everywhere.
2026-04-03 21:20:59 +02:00
Laurent Destailleur
333c7f284e
Clean code
2026-04-03 20:36:41 +02:00
Laurent Destailleur
386883408d
Merge branch '23.0' of git@github.com:Dolibarr/dolibarr.git into develop
2026-03-23 23:59:02 +01:00
Laurent Destailleur
a06b14b7dc
FIX #GHSA-v5fq-cf5m-vwv7 - Credit Grzegorz Tworek, Sec4check
...
(grzegorz.tworek@sec4check.pl )
2026-03-23 23:48:30 +01:00
Laurent Destailleur
6a70193549
CI
2026-03-12 13:27:43 +01:00
kkhelifa-opendsi
548bb94e4f
NEW: Rework of the management of the card and fields on the web portal ( #36076 )
...
* NEW: Rework of the management of the card and fields on the web portal
* Correction pre-commit check
* Correction affichage logo login
* Ajout hook
* Ajout params fonction FormWebPortal::convertAllLink()
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction phpstan
* Correction travis
* Correction travis
* Correction travis
* Correction travis
* Correction
* Fix get options of sellist by AJAX in webportal scope
* Correction pre-commit
* Correction pre-commit
* Add hook and change hook name for viewImage controller
* Correction phan
* Corrections
* Corrections
2025-11-19 15:14:53 +01:00
Laurent Destailleur
70d4461c1d
QUAL Add phpunit test to avoid a bad code sequence
2025-11-03 02:00:01 +01:00
ldestailleur
6ead2839d0
Fix missing several test on permission on actions
2025-09-23 16:41:53 +02:00
ldestailleur
4e89f046d1
Merge branch '21.0' of git@github.com:Dolibarr/dolibarr.git into 22.0
2025-09-01 16:47:39 +02:00
ldestailleur
bb0974add9
FIX Security when using feature Advanced Target of emailing (hidden in
...
v21, default in v22+). Possible SQL injection by users with permissions
to make mass emailing. Reported by Simon Perdrisat.
2025-09-01 16:38:01 +02:00
MDW
edfb385fd7
More explicit reporting for NOT IN sql forge notices
2025-02-22 17:07:37 +01:00
Frédéric FRANCE
9067c6deec
replace deprecated ( #31803 )
...
* replace deprecated
* replace deprecated
2024-11-14 00:16:43 +01:00
Laurent Destailleur
f8d5cfbb3b
Fix phpunit
2024-11-09 17:21:23 +01:00
Laurent Destailleur
e6f1d4835f
Clean sql code
2024-10-29 02:58:20 +01:00
Laurent Destailleur
58cc96cd33
QUAL All $conf->global->module->enabled are replaced with isModEnabled()
2024-10-07 14:40:29 +02:00
Laurent Destailleur
d7d8f87045
Clean code. Add permission test after action = something.
2024-09-30 11:38:29 +02:00
Laurent Destailleur
4a303a61d1
More robust test on missing permission for CTI
2024-09-13 11:13:38 +02:00
Laurent Destailleur
75d62b5f0a
Fix check on permissions
2024-09-13 04:47:07 +02:00
Laurent Destailleur
77a76aad7a
Fix test on permissions
2024-09-06 17:36:50 +02:00
Laurent Destailleur
0f979a31f3
Fix on permission test
2024-09-06 16:47:50 +02:00
Laurent Destailleur
b02a891f2f
Enhance the protection on missing permissions
2024-09-06 15:49:57 +02:00
Laurent Destailleur
6af16694cc
NEW Add test to forbidden NOW() SQL function.
2024-09-05 13:22:19 +02:00
Laurent Destailleur
8cdef1d713
NEW Activate PHPUnit with tests on permission on $action ==...
2024-09-03 16:33:02 +02:00
Laurent Destailleur
c79f72f785
Fix missing tests on permissions
2024-09-03 16:19:18 +02:00
Laurent Destailleur
2e2ab9d84d
Fix missing test on permissions
2024-09-01 13:48:58 +02:00
Laurent Destailleur
815352e8f9
Fix permission on delete token
2024-08-31 19:26:46 +02:00
Laurent Destailleur
827c3daa03
Fix test on permissions
2024-08-31 19:15:14 +02:00
Laurent Destailleur
c4c55b00fd
Fix permissions tests
2024-08-31 18:38:16 +02:00
Laurent Destailleur
c30d706ab6
Add more phpunit tests
2024-08-31 18:11:16 +02:00
Laurent Destailleur
d094a57bad
Merge branch '20.0' of git@github.com:Dolibarr/dolibarr.git into develop
2024-08-31 17:32:23 +02:00
Laurent Destailleur
a5c786fe6e
Fix not yed ready for v20
2024-08-31 17:31:30 +02:00
Laurent Destailleur
2009c6f09a
Merge branch '20.0' of git@github.com:Dolibarr/dolibarr.git into develop
2024-08-31 17:30:32 +02:00
Laurent Destailleur
b8dadd4b6a
Debug v20 Fix missing test on permissions
2024-08-31 17:23:13 +02:00
Laurent Destailleur
2c28d039e2
Fix test on permissions
2024-08-31 16:26:08 +02:00
Laurent Destailleur
1e3a860767
Fix test on permissions
2024-08-31 16:01:27 +02:00
Laurent Destailleur
ee6779dbcf
Clean code
2024-08-31 15:08:17 +02:00
Laurent Destailleur
34fefcaeb2
Clean code
2024-08-01 12:46:30 +02:00
Laurent Destailleur
46cde6431a
NEW Can use a specific profile to send email for password forgotten
2024-08-01 11:36:21 +02:00
Laurent Destailleur
fbf0912a98
Fix phpunit warnings
2024-03-28 21:33:09 +01:00
