dolibarr/htdocs/comm/mailing/class
MDW c4d2833421
fix: Replace db->escape with db->sanitize in SQL query construction (#39357)
Replaced all instances of `$this->db->escape($filtermode)` with `$this->db->sanitize($filtermode)` in SQL query construction across multiple classes to ensure proper SQL sanitization and prevent potential SQL injection vulnerabilities.
2026-08-04 18:40:04 +02:00
..
advtargetemailing.class.php Fix bad sanitization in advanced mailing target - Reported by Davide 2026-07-24 07:13:00 +02:00
api_mailings.class.php Fix sanitize fields in API put and post for extrafields 2026-05-09 01:16:35 +02:00
html.formadvtargetemailing.class.php Qual: Fix 'SqlInjection' notices (#39229) 2026-07-20 15:26:43 +02:00
mailing.class.php fix: Replace db->escape with db->sanitize in SQL query construction (#39357) 2026-08-04 18:40:04 +02:00
mailing_targets.class.php Qual: Remove unnecessary quotes around integer values in SQL queries (#39290) 2026-07-27 12:59:14 +02:00