From: vincent@cubedesigners.com <vincent@cubedesigners.com@f5622870-0f3c-0410-866d-9cb505b7a8ef>
Date: Mon, 27 Feb 2012 17:27:09 +0000 (+0000)
Subject: (no commit message)
X-Git-Url: http://git.cubedesigners.com/?a=commitdiff_plain;h=0817ad9b1adaa217cead3fdb8ea6b8dc0154c4b2;p=cubeextranet.git

---

diff --git a/inc/ws/DAO/class.ws.dao.book.php b/inc/ws/DAO/class.ws.dao.book.php
index 7679f8eba..63ace3d40 100644
--- a/inc/ws/DAO/class.ws.dao.book.php
+++ b/inc/ws/DAO/class.ws.dao.book.php
@@ -395,7 +395,14 @@ class wsDAOBook extends commonDAO {
 				$w[] = 'status IN(' . implode(',', array_keys($this->filtres['status_book'])) . ')';
 			}
 			if (commonFiltre::test('revendeur_book', $this->filtres)) {
-				$w[] = 'facturable IN(\'' . implode('\',\'', array_keys($this->filtres['revendeur_book'])) . '\')';
+				$v=array_keys($this->filtres['revendeur_book']);
+				$values=array();
+				foreach($v as $r){
+					$values[]=$this->con->escape($r);
+				}
+				
+				
+				$w[] = 'facturable IN(\'' . implode('\',\'', $values) . '\')';
 			}
 			return implode(' AND ', $w);
 		} else {