Activated strict SQL mode, minor SQL injection fix, fixed _vl() debug helper.

[fa-stable.git] / includes / ui / ui_input.inc

diff --git a/includes/ui/ui_input.inc b/includes/ui/ui_input.inc
index 1b37b4243b453cd324ae8c9c288155d76fc25622..59a3676ef5664ed7ccc7bd004411ac37c2c824aa 100644 (file)
--- a/includes/ui/ui_input.inc
+++ b/includes/ui/ui_input.inc
@@ -159,6 +159,7 @@ function submit($name, $value, $echo=true, $title=false, $atype=false, $icon=fal
                                        if ($icon===false) $icon=ICON_ESCAPE; break;
 
                                case 'nonajax':
+                               case 'download':
                                        $atype = false;
                        }
                }
@@ -304,7 +305,7 @@ function button($name, $value, $title=false, $icon=false,  $aspect='')
                if ($value == _("Delete")) // Helper during implementation
                        $icon = ICON_DELETE;
                return "<button type='submit' class='editbutton' name='"
-                       .htmlentities(strtr($name, array('.'=>'=2E', '='=>'=3D',// ' '=>'=20','['=>'=5B'
+                       .html_specials_encode(strtr($name, array('.'=>'=2E', '='=>'=3D',// ' '=>'=20','['=>'=5B'
                        )))
                        ."' value='1'" . ($title ? " title='$title'":" title='$value'")
                        . ($aspect ? " aspect='$aspect'" : '')
@@ -347,9 +348,13 @@ function select_button_cell($name, $value, $title=false)
 
 function check_value($name)
 {
-    if (!isset($_POST[$name]) || ($_POST[$name]+0) === 0)
-               return 0;
-       return 1;
+       if (is_array($name)) {
+               $ret = array();
+               foreach($name as $key)
+                       $ret[$key] = check_value($key);
+               return $ret;
+       } else
+               return (empty($_POST[$name]) ? 0 : 1);
 }
 
 function checkbox($label, $name, $value=null, $submit_on_change=false, $title=false)
@@ -759,7 +764,7 @@ function ref_cells($label, $name, $title=null, $init=null, $params=null, $submit
 
                label_cell($list."<input name='".$name."' "
                        .(check_edit_access($name) ? '' : 'disabled ')
-                       ."value='".@$_POST[$name]."' size=10 maxlength=35>");
+                       ."value='".@$_POST[$name]."' size=16 maxlength=35>");
        }
        else // just wildcard ref field (e.g. for global inquires)
        {