Changeset 284 for trunk/admin/modules/Elezioni

Timestamp:

Apr 21, 2019, 11:49:56 PM (6 years ago)

Author:

roby

Message:

 

Location:

trunk/admin/modules/Elezioni

Files:

• backup.php (modified) (1 diff)
• ele_permessi.php (modified) (1 diff)
• scarica.php (modified) (2 diffs)

trunk/admin/modules/Elezioni/backup.php

@@ -8 +8 @@
 $sth = $dbi->prepare("$sql");
 $sth->execute();        
-$row = $sth->fetch(PDO::FETCH_BOTH);
-$nomeFile=$row[0];
+//$row = $sth->fetch(PDO::FETCH_BOTH);
+//$nomeFile=$row[0];
+list($nomeFile)=$sth->fetch(PDO::FETCH_NUM);
 #$nomeFile="backup";
 header( 'Content-Type: application/octet-stream' );

trunk/admin/modules/Elezioni/ele_permessi.php

@@ -87 +87 @@
         }
         echo "</select></td>";
-        $ressede = mysql_query("SELECT id_sede, indirizzo from ".$prefix."_ele_sede where id_cons=$id_cons";
+        $sql="SELECT id_sede, indirizzo from ".$prefix."_ele_sede where id_cons=$id_cons";
         $ressede = $dbi->prepare("$sql");
         $ressede->execute();                            

trunk/admin/modules/Elezioni/scarica.php

@@ -30 +30 @@
 if (isset($_GET['help'])) $help=intval($_GET['help']);
 if (isset($param['fase'])) $fase=intval($param['fase']); else $fase=0;
-if (isset($param['id_cons_gen2'])) $id_cons_gen2=intval($param['id_cons_gen2']); else $id_cons_gen2='';
-if (isset($param['indirizzoweb'])) get_magic_quotes_gpc() ? $indirizzoweb=$param['indirizzoweb']:$indirizzoweb=addslashes($param['indirizzoweb']); else $indirizzoweb='http://www.eleonline.it/moduli/eleonline2/client/';
-if (isset($param['id_comune2'])) $id_comune2=intval($param['id_comune2']); else $id_comune2='';
+if (isset($param['id_cons_gen2'])) $id_cons_gen2=intval($param['id_cons_gen2']); else $id_cons_gen2='0';
+if (isset($param['indirizzoweb'])) get_magic_quotes_gpc() ? $indirizzoweb=$param['indirizzoweb']:$indirizzoweb=addslashes($param['indirizzoweb']); else $indirizzoweb='http://www.eleonline.it/moduli/client/';
+if (isset($param['id_comune2'])) $id_comune2=intval($param['id_comune2']); else $id_comune2='0';
 
 /******************************************************/
@@ -80 +80 @@
         echo "<td><b>"._INDIRIZZOWEB1."</b></td>";
         echo "<td><input type=\"hidden\" name=\"id_cons_gen\" value=\"$id_cons_gen\"><input type=\"hidden\" name=\"op\" value=\"scarica\"><input type=\"hidden\" name=\"fase\" value=\"3\"><input type=\"hidden\" name=\"indirizzoweb\" value=\"$indirizzoweb\">$indirizzoweb</td></td></tr>";
-$cons_rem=intval($_GET[($id_cons_gen2)]);
+$cons_rem=addslashes($_GET[($id_cons_gen2)]);
 echo "<tr><td><b>"._CONSULTA.":</b></td><td>$cons_rem</td></tr>";
         echo "<tr><td><b>"._SCELTACOMUNE."</b></td><td>$rem_cons</td></tr>";