dolibarr/htdocs
MDW fb14661435
Qual: Cleanup after #39325 (#39350)
* Qual: Replace hardcoded status and type values with constants, sanitized

# Qual: Replace hardcoded status and type values with constants, sanitized

Replace hardcoded status and type values with constants.

Added missing sanitizations.

* Qual: Apply formatting rules, null test
2026-08-04 18:59:31 +02:00
..
accountancy Fix member subscription with empty date valid (#39310) 2026-07-30 18:03:44 +02:00
adherents 22 report sec (#39235) 2026-07-20 15:29:30 +02:00
admin NEW - Definition of a global email signature (#37427) 2026-08-02 16:59:36 +02:00
ai Qual/Sec: Use db->sanitize instead of db->escape when not quoted, fix some quoting (#39286) 2026-07-27 13:00:33 +02:00
api Fix deletion must not use the glob by default. 2026-07-29 13:20:28 +02:00
asset Qual: Fix 'SqlInjection' notices (#39229) 2026-07-20 15:26:43 +02:00
asterisk
barcode
blockedlog Fix member subscription with empty date valid (#39310) 2026-07-30 18:03:44 +02:00
bom Qual/Sec: Use db->sanitize instead of db->escape when not quoted, fix some quoting (#39286) 2026-07-27 13:00:33 +02:00
bookcal Qual/Sec: Use db->sanitize instead of db->escape when not quoted, fix some quoting (#39286) 2026-07-27 13:00:33 +02:00
bookmarks Qual: Fix 'SqlInjection' notices (#39223) 2026-07-20 02:51:42 +02:00
categories Qual: Fix 'SqlInjection' notices (#39213) 2026-07-19 17:32:14 +02:00
collab
comm NEW printObjectRightToolbar hook on object event pages (propal, ticket) + modulebuilder (#39348) 2026-08-02 00:11:28 +02:00
commande NEW add method confirmProduced in MOs API (#39324) 2026-07-30 18:22:44 +02:00
compta Avoid autofill button being considered as submit button by web browsers (#39330) 2026-07-30 18:23:58 +02:00
conf
contact Qual: Fix 'SqlInjection' notices (#39216) 2026-07-23 19:06:39 +02:00
contrat Qual: Fix 'SqlInjection' notices (#39216) 2026-07-23 19:06:39 +02:00
core Qual: Cleanup after #39325 (#39350) 2026-08-04 18:59:31 +02:00
cron Qual: Fix 'SqlInjection' notices (#39221) 2026-07-20 02:51:11 +02:00
custom
datapolicy Qual: Fix 'SqlInjection' notices (#39213) 2026-07-19 17:32:14 +02:00
dav FIX: CDavLib getSqlCalEvents broken after actioncomm_cdav table removal, Add CalDav tests (#39322) 2026-07-30 17:09:34 +02:00
debugbar
delivery Qual: Fix 'SqlInjection' notices (#39219) 2026-07-20 02:50:44 +02:00
don Qual: Fix 'SqlInjection' notices (#39225) 2026-07-20 02:52:07 +02:00
ecm Fix deletion must not use the glob by default. 2026-07-29 13:20:28 +02:00
emailcollector Qual: Fix 'SqlInjection' notices (#39203) 2026-07-19 15:53:14 +02:00
eventorganization Qual/Sec: Use db->sanitize instead of db->escape when not quoted, fix some quoting (#39286) 2026-07-27 13:00:33 +02:00
expedition Qual: Remove unnecessary quotes around integer values in SQL queries (#39290) 2026-07-27 12:59:14 +02:00
expensereport Qual: Fix Phan notices (#39281) 2026-07-27 13:03:04 +02:00
exports Fix deletion must not use the glob by default. 2026-07-29 13:20:28 +02:00
fichinter Qual: Fix 'SqlInjection' notices (#39216) 2026-07-23 19:06:39 +02:00
fourn NEW add method confirmProduced in MOs API (#39324) 2026-07-30 18:22:44 +02:00
ftp
holiday
hrm Fix deletion must not use the glob by default. 2026-07-29 13:20:28 +02:00
imports Fix deletion must not use the glob by default. 2026-07-29 13:20:28 +02:00
includes
install NEW element_element : add user & date creat/modif columns (#39380) 2026-08-04 18:25:43 +02:00
intracommreport Qual/Sec: Use db->sanitize instead of db->escape when not quoted, fix some quoting (#39286) 2026-07-27 13:00:33 +02:00
knowledgemanagement Qual/Sec: Use db->sanitize instead of db->escape when not quoted, fix some quoting (#39286) 2026-07-27 13:00:33 +02:00
langs NEW - Definition of a global email signature (#37427) 2026-08-02 16:59:36 +02:00
loan Qual: Fix 'SqlInjection' notices (#39225) 2026-07-20 02:52:07 +02:00
mailmanspip/class
margin Qual: Update SQL query variables for situation mode in margin reports (#39282) 2026-07-27 13:02:34 +02:00
modulebuilder NEW printObjectRightToolbar hook on object event pages (propal, ticket) + modulebuilder (#39348) 2026-08-02 00:11:28 +02:00
mrp NEW add method confirmProduced in MOs API (#39324) 2026-07-30 18:22:44 +02:00
multicurrency qual: Update Phan baseline and suppress duplicate array key warnings (#39352) 2026-08-04 18:53:06 +02:00
opensurvey Qual: Fix 'SqlInjection' notices (#39223) 2026-07-20 02:51:42 +02:00
partnership Qual/Sec: Use db->sanitize instead of db->escape when not quoted, fix some quoting (#39286) 2026-07-27 13:00:33 +02:00
paypal FIX: PayPal API calls set CURLOPT_SSL_VERIFYHOST to a bool instead of 2 (#39155) 2026-07-16 02:23:26 +02:00
printing
product NEW Product/service creation in a dialog popup from the add-line block ('@FIXME Not working yet') (#39307) 2026-07-31 18:48:34 +02:00
projet Fix: Add verification for allowed table from listofreferent in unlink project (#38310) 2026-07-30 19:39:32 +02:00
public Fix member subscription with empty date valid (#39310) 2026-07-30 18:03:44 +02:00
quickmemo Qual: Fix 'SqlInjection' notices (#39222) 2026-07-20 02:51:25 +02:00
reception NEW add method confirmProduced in MOs API (#39324) 2026-07-30 18:22:44 +02:00
recruitment Qual/Sec: Use db->sanitize instead of db->escape when not quoted, fix some quoting (#39286) 2026-07-27 13:00:33 +02:00
resource Qual: Fix 'SqlInjection' notices (#39223) 2026-07-20 02:51:42 +02:00
salaries Qual: Remove unnecessary quotes around integer values in SQL queries (#39290) 2026-07-27 12:59:14 +02:00
societe NEW - API Get sales representative (#39338) 2026-07-31 23:51:57 +02:00
stripe
subtotals
supplier_invoice/admin
supplier_order/admin
supplier_proposal NEW add method confirmProduced in MOs API (#39324) 2026-07-30 18:22:44 +02:00
takepos Automated merge from 23.0 to develop 2026-07-23 17:06:43 +02:00
theme Clean code 2026-07-20 14:58:04 +02:00
ticket Ticket API: allow postNewMessage to target ticket by id or ref (#39360) 2026-08-04 18:36:51 +02:00
user Qual: Remove unnecessary quotes around integer values in SQL queries (#39290) 2026-07-27 12:59:14 +02:00
variants Qual: Fix 'SqlInjection' notices (#39223) 2026-07-20 02:51:42 +02:00
webhook Qual/Sec: Use db->sanitize instead of db->escape when not quoted, fix some quoting (#39286) 2026-07-27 13:00:33 +02:00
webportal Qual: Fix 'SqlInjection' notices (#39216) 2026-07-23 19:06:39 +02:00
webservices Qual: Fix 'SqlInjection' notices (#39229) 2026-07-20 15:26:43 +02:00
website Qual: Fix 'SqlInjection' notices (#39213) 2026-07-19 17:32:14 +02:00
workstation Qual/Sec: Use db->sanitize instead of db->escape when not quoted, fix some quoting (#39286) 2026-07-27 13:00:33 +02:00
zapier
document.php
favicon.ico
filefunc.inc.php
index.php
main.inc.php FIX Whole session loses its menus after a login done from inside a dialog popup (#39312) 2026-07-30 18:48:21 +02:00
master.inc.php
robots.txt
security.txt
version.inc.php Fix restore version 2026-07-31 02:49:52 +02:00
viewimage.php
waf.inc.php