solocla/trf_certest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

removed htmlspecialchars on import && savings

Browse Source
This commit is contained in:
r.mubarakzyanov 2026-03-30 13:24:18 +03:00
parent 8bae2d7008
commit fb09f033ae
4 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
public/userarea/import_insert.php
View File

@ -126,7 +126,7 @@ foreach ($selected_rows as $rowIndex) {
case 'Testo': case 'Testo':
case 'VARCHAR': case 'VARCHAR':
default: default:
$fieldValue = !empty($fieldValue) ? htmlspecialchars((string)$fieldValue) : ($mapping['manual_default'] ?? ''); $fieldValue = !empty($fieldValue) ? (string)$fieldValue : ($mapping['manual_default'] ?? '');
break; break;
} }
} else { } else {

4
public/userarea/process_import_xls.php
View File

@ -70,7 +70,7 @@ try {
$columnLetter = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::stringFromColumnIndex($col); $columnLetter = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::stringFromColumnIndex($col);
$cell = $worksheet->getCell($columnLetter . $header_row); $cell = $worksheet->getCell($columnLetter . $header_row);
$cellValue = $cell ? $cell->getCalculatedValue() : ''; // Usa getCalculatedValue per le formule $cellValue = $cell ? $cell->getCalculatedValue() : ''; // Usa getCalculatedValue per le formule
$headerRowData[] = htmlspecialchars($cellValue ?: ''); $headerRowData[] = $cellValue ?: '';
} }
// Estrai i dati a partire dalla riga successiva // Estrai i dati a partire dalla riga successiva
@ -80,7 +80,7 @@ try {
$columnLetter = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::stringFromColumnIndex($col); $columnLetter = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::stringFromColumnIndex($col);
$cell = $worksheet->getCell($columnLetter . $row); $cell = $worksheet->getCell($columnLetter . $row);
$cellValue = $cell ? $cell->getCalculatedValue() : ''; // Usa getCalculatedValue per le formule $cellValue = $cell ? $cell->getCalculatedValue() : ''; // Usa getCalculatedValue per le formule
$rowData[] = htmlspecialchars($cellValue ?: ''); $rowData[] = $cellValue ?: '';
} }
if (!empty(array_filter($rowData))) { if (!empty(array_filter($rowData))) {
$excelData[] = $rowData; $excelData[] = $rowData;

4
public/userarea/process_import_xls2.php
View File

@ -146,7 +146,7 @@ try {
$columnLetter = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::stringFromColumnIndex($col); $columnLetter = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::stringFromColumnIndex($col);
$cell = $worksheet->getCell($columnLetter . $header_row); $cell = $worksheet->getCell($columnLetter . $header_row);
$cellValue = $cell ? $cell->getCalculatedValue() : ''; $cellValue = $cell ? $cell->getCalculatedValue() : '';
$headerRowData[] = htmlspecialchars($cellValue ?: ''); $headerRowData[] = $cellValue ?: '';
} }
// Estrai i dati a partire dalla riga successiva, includendo excelrow // Estrai i dati a partire dalla riga successiva, includendo excelrow
@ -156,7 +156,7 @@ try {
$columnLetter = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::stringFromColumnIndex($col); $columnLetter = \PhpOffice\PhpSpreadsheet\Cell\Coordinate::stringFromColumnIndex($col);
$cell = $worksheet->getCell($columnLetter . $row); $cell = $worksheet->getCell($columnLetter . $row);
$cellValue = $cell ? $cell->getCalculatedValue() : ''; $cellValue = $cell ? $cell->getCalculatedValue() : '';
$rowData[] = htmlspecialchars($cellValue ?: ''); $rowData[] = $cellValue ?: '';
} }
if (!empty(array_filter($rowData))) { if (!empty(array_filter($rowData))) {
$excelData[] = ['data' => $rowData, 'excelrow' => $row]; $excelData[] = ['data' => $rowData, 'excelrow' => $row];

2
public/userarea/save_edited_data.php
View File

@ -23,7 +23,7 @@ try {
foreach ($_POST as $key => $value) { foreach ($_POST as $key => $value) {
if ($key !== 'iddatadb' && !in_array($key, $excludeFields)) { if ($key !== 'iddatadb' && !in_array($key, $excludeFields)) {
$updates[] = "$key = ?"; $updates[] = "$key = ?";
$values[] = htmlspecialchars($value); $values[] = $value;
} }
} }
$values[] = $iddatadb; $values[] = $iddatadb;