From c56c6f9b286dd30efedb0fac78832f41d244ab7e Mon Sep 17 00:00:00 2001
From: "Committo,Ergo:sum" <esj@rezo.net>
Date: Fri, 8 Dec 2006 18:33:58 +0000
Subject: [PATCH] =?UTF-8?q?Un=20bug=20quasi=20invisible:=20les=20simples?=
 =?UTF-8?q?=20r=C3=A9dacteurs=20ne=20pouvaient=20faire=20tourner=20leur=20?=
 =?UTF-8?q?image=20qu'une=20seule=20fois,=20le=20formulaire=20renvoy=C3=A9?=
 =?UTF-8?q?=20par=20ajax=20au=20coup=20d'apr=C3=A8s=20perdant=20l'id=20de?=
 =?UTF-8?q?=20l'article=20ou=20de=20la=20rubrique=20associ=C3=A9e.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 ecrire/inc/tourner.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ecrire/inc/tourner.php b/ecrire/inc/tourner.php
index ce2a2663b6..c6336c8cd9 100644
--- a/ecrire/inc/tourner.php
+++ b/ecrire/inc/tourner.php
@@ -26,7 +26,11 @@ function inc_tourner_dist($id_document, $document, $script, $flag, $type)
 		$document = spip_fetch_array(spip_query("SELECT * FROM spip_documents WHERE id_document = " . intval($id_document)));
 	}
 
-	$id = $document["id_$type"];
+	if (preg_match('/^\w+$/',$type)) { // securite
+		$id = spip_fetch_array(spip_query("SELECT id_$type FROM spip_documents_$type" . "s WHERE id_document = " . intval($id_document)), SPIP_NUM);
+		$id = $id[0];
+	} else $id = 0; // le hash sera inutilisable
+
 	$titre = $document['titre'];
 	$id_vignette = $document['id_vignette'];
 	$fichier = entites_html($document['fichier']);
-- 
GitLab