(no commit message)

diff --git a/inc/ws/DAO/class.ws.dao.book.php b/inc/ws/DAO/class.ws.dao.book.php
index 7679f8eba8ddef85577478de861798b3f391db65..63ace3d405b494681880dbfa2d152a21afa86348 100644 (file)
--- a/inc/ws/DAO/class.ws.dao.book.php
+++ b/inc/ws/DAO/class.ws.dao.book.php
@@ -395,7 +395,14 @@ class wsDAOBook extends commonDAO {
                                $w[] = 'status IN(' . implode(',', array_keys($this->filtres['status_book'])) . ')';\r
                        }\r
                        if (commonFiltre::test('revendeur_book', $this->filtres)) {\r
-                               $w[] = 'facturable IN(\'' . implode('\',\'', array_keys($this->filtres['revendeur_book'])) . '\')';\r
+                               $v=array_keys($this->filtres['revendeur_book']);\r
+                               $values=array();\r
+                               foreach($v as $r){\r
+                                       $values[]=$this->con->escape($r);\r
+                               }\r
+                               \r
+                               \r
+                               $w[] = 'facturable IN(\'' . implode('\',\'', $values) . '\')';\r
                        }\r
                        return implode(' AND ', $w);\r
                } else {\r