From: Alexander Smirnov <fredeom@mail.ru>
Date: Mon, 3 Jun 2024 11:41:37 +0000 (+0300)
Subject: fix part 002
X-Git-Tag: 1.1~3^2
X-Git-Url: https://gitweb.erp-flowers.ru/?a=commitdiff_plain;h=997622101b89b9893306a29b70a976ebbd6a17af;p=erp24_rep%2Fyii-erp24%2F.git

fix part 002
---

diff --git a/erp24/modul/products/ajax_product_provider_add.php b/erp24/modul/products/ajax_product_provider_add.php
index 01a69c1a..502b3a5d 100644
--- a/erp24/modul/products/ajax_product_provider_add.php
+++ b/erp24/modul/products/ajax_product_provider_add.php
@@ -7,12 +7,12 @@ include_once(dirname(__DIR__, 2) . "/inc/base_new.php");
 if(!empty($_REQUEST["id"])) {
   $id=htmlentities($_REQUEST["id"]);
   $options=htmlentities($_REQUEST["options"]);
-  $provider_id=htmlentities($_REQUEST["provider_id"]);
+  $provider_id=intval($_REQUEST["provider_id"]);
   $expiration_days=intval($_REQUEST["expiration_days"]);
   $min_lot=intval($_REQUEST["min_lot"]);
   $colors=htmlentities($_REQUEST["colors"]);
   $min_order=intval($_REQUEST["min_order"]);
-  $price_zakup=htmlentities($_REQUEST["price_zakup"]);
+  $price_zakup=floatval($_REQUEST["price_zakup"]);
   $group_id=intval($_REQUEST["group_id"]);  
   $main=intval($_REQUEST["main"]);