projects
/
kivitendo-erp.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
kleiner Fix zum Top100 System
[kivitendo-erp.git]
/
SL
/
BP.pm
diff --git
a/SL/BP.pm
b/SL/BP.pm
index
94a1e6a
..
9365d23
100644
(file)
--- a/
SL/BP.pm
+++ b/
SL/BP.pm
@@
-263,7
+263,7
@@
sub delete_spool {
sub print_spool {
$main::lxdebug->enter_sub();
sub print_spool {
$main::lxdebug->enter_sub();
- my ($self, $myconfig, $form, $spool) = @_;
+ my ($self, $myconfig, $form, $spool
, $output
) = @_;
# connect to database
my $dbh = $form->dbconnect($myconfig);
# connect to database
my $dbh = $form->dbconnect($myconfig);
@@
-275,8
+275,10
@@
sub print_spool {
foreach my $i (1 .. $form->{rowcount}) {
if ($form->{"checked_$i"}) {
foreach my $i (1 .. $form->{rowcount}) {
if ($form->{"checked_$i"}) {
- open(OUT, $form->{OUT}) or $form->error("$form->{OUT} : $!");
+ # $output is safe ( = does not come directly from the browser).
+ open(OUT, $output) or $form->error("$output : $!");
+ $form->{"spoolfile_$i"} =~ s|.*/||;
$spoolfile = qq|$spool/$form->{"spoolfile_$i"}|;
# send file to printer
$spoolfile = qq|$spool/$form->{"spoolfile_$i"}|;
# send file to printer