|
Lines 60-65
my ( $template, $borrowernumber, $cookie ) = get_template_and_user(
Link Here
|
| 60 |
} |
60 |
} |
| 61 |
); |
61 |
); |
| 62 |
|
62 |
|
|
|
63 |
# Validate line and column |
| 64 |
if ( |
| 65 |
$do_it |
| 66 |
&& ( !$line |
| 67 |
|| $line !~ /^(aqbasket|aqorders|aqbooksellers|items|biblioitems|aqbudgets)\.\w+$/ |
| 68 |
|| !$column |
| 69 |
|| $column !~ /^(aqbasket|aqorders|aqbooksellers|items|biblioitems|aqbudgets)\.\w+$/ ) |
| 70 |
) |
| 71 |
{ |
| 72 |
C4::Output::output_error( $input, 'Possible SQL injection' ); |
| 73 |
exit; |
| 74 |
} |
| 75 |
|
| 63 |
our $sep = C4::Context->csv_delimiter( scalar $input->param("sep") ); |
76 |
our $sep = C4::Context->csv_delimiter( scalar $input->param("sep") ); |
| 64 |
|
77 |
|
| 65 |
$template->param( |
78 |
$template->param( |
| 66 |
- |
|
|