View | Details | Raw Unified | Return to bug 39866
Collapse All | Expand All

(-)a/reports/acquisitions_stats.pl (-1 / +13 lines)
Lines 60-65 my ( $template, $borrowernumber, $cookie ) = get_template_and_user( Link Here
60
    }
60
    }
61
);
61
);
62
62
63
# Validate line and column
64
if (
65
    $do_it
66
    && (  !$line
67
        || $line !~ /^(aqbasket|aqorders|aqbooksellers|items|biblioitems|aqbudgets)\.\w+$/
68
        || !$column
69
        || $column !~ /^(aqbasket|aqorders|aqbooksellers|items|biblioitems|aqbudgets)\.\w+$/ )
70
    )
71
{
72
    C4::Output::output_error( $input, 'Possible SQL injection' );
73
    exit;
74
}
75
63
our $sep = C4::Context->csv_delimiter( scalar $input->param("sep") );
76
our $sep = C4::Context->csv_delimiter( scalar $input->param("sep") );
64
77
65
$template->param(
78
$template->param(
66
- 

Return to bug 39866