Projekt

Allgemein

Profil

« Zurück | Weiter » 

Revision d46c087d

Von Moritz Bunkus vor fast 18 Jahren hinzugefügt

  • ID d46c087d3197582ecd51d983ac7d2c2a8399f557
  • Vorgänger 8cbf20b5
  • Nachfolger 8482e69b

$form->parse_template() verwendet $form->{OUT} direkt oder indirekt in open(). Deswegen $form->{OUT} definitiv nur aus sicheren Strings aufbauen.

Unterschiede anzeigen:

bin/mozilla/rp.pl
sub send_email {
$lxdebug->enter_sub();
$form->{OUT} = "$sendmail";
$form->{subject} = $locale->text('Statement') . qq| - $form->{todate}|
unless $form->{subject};
......
$form->{"statement_1"} = 1;
&print_form;
$form->{media} = 'email';
print_form();
$form->redirect(
$locale->text('Statement sent to') . " $form->{$form->{ct}}");
$form->redirect($locale->text('Statement sent to') . " $form->{$form->{ct}}");
$lxdebug->leave_sub();
}
......
$form->error($locale->text('Nothing selected!')) unless $selected;
if ($form->{media} eq 'printer') {
$form->{OUT} = "| $myconfig{printer}";
$form->{"$form->{ct}_id"} = "";
} else {
$form->{"statement_1"} = 1;
......
RP->aging(\%myconfig, \%$form);
&print_form;
print_form();
$form->redirect($locale->text('Statements sent to printer!'))
if ($form->{media} eq 'printer');
......
$attachment_suffix = "pdf";
}
$form->{IN} = "$form->{type}.$suffix";
$form->{IN} = "$form->{type}.$suffix";
$form->{OUT} =
$form->{media} eq 'email' ? $sendmail :
$form->{media} eq 'printer' ? "| $myconfig{printer}" : "";
# Save $form->{email} because it will be overwritten.
$form->{EMAIL_RECIPIENT} = $form->{email};

Auch abrufbar als: Unified diff