Projekt

Allgemein

Profil

« Zurück | Weiter » 

Revision d46c087d

Von Moritz Bunkus vor mehr als 17 Jahren hinzugefügt

  • ID d46c087d3197582ecd51d983ac7d2c2a8399f557
  • Vorgänger 8cbf20b5
  • Nachfolger 8482e69b

$form->parse_template() verwendet $form->{OUT} direkt oder indirekt in open(). Deswegen $form->{OUT} definitiv nur aus sicheren Strings aufbauen.

Unterschiede anzeigen:

bin/mozilla/rp.pl
1947 1947
sub send_email {
1948 1948
  $lxdebug->enter_sub();
1949 1949

  
1950
  $form->{OUT} = "$sendmail";
1951

  
1952 1950
  $form->{subject} = $locale->text('Statement') . qq| - $form->{todate}|
1953 1951
    unless $form->{subject};
1954 1952

  
......
1956 1954

  
1957 1955
  $form->{"statement_1"} = 1;
1958 1956

  
1959
  &print_form;
1957
  $form->{media} = 'email';
1958
  print_form();
1960 1959

  
1961
  $form->redirect(
1962
                 $locale->text('Statement sent to') . " $form->{$form->{ct}}");
1960
  $form->redirect($locale->text('Statement sent to') . " $form->{$form->{ct}}");
1963 1961

  
1964 1962
  $lxdebug->leave_sub();
1965 1963
}
......
1983 1981
  $form->error($locale->text('Nothing selected!')) unless $selected;
1984 1982

  
1985 1983
  if ($form->{media} eq 'printer') {
1986
    $form->{OUT} = "| $myconfig{printer}";
1987 1984
    $form->{"$form->{ct}_id"} = "";
1988 1985
  } else {
1989 1986
    $form->{"statement_1"} = 1;
......
1991 1988

  
1992 1989
  RP->aging(\%myconfig, \%$form);
1993 1990

  
1994
  &print_form;
1991
  print_form();
1995 1992

  
1996 1993
  $form->redirect($locale->text('Statements sent to printer!'))
1997 1994
    if ($form->{media} eq 'printer');
......
2031 2028
    $attachment_suffix = "pdf";
2032 2029
  }
2033 2030

  
2034
  $form->{IN} = "$form->{type}.$suffix";
2035

  
2031
  $form->{IN}  = "$form->{type}.$suffix";
2032
  $form->{OUT} =
2033
    $form->{media} eq 'email'   ? $sendmail              :
2034
    $form->{media} eq 'printer' ? "| $myconfig{printer}" : "";
2036 2035

  
2037 2036
  # Save $form->{email} because it will be overwritten.
2038 2037
  $form->{EMAIL_RECIPIENT} = $form->{email};

Auch abrufbar als: Unified diff