From cbd15a1a62eac04973a77aa9da7ab036b48f03be Mon Sep 17 00:00:00 2001
From: loviuz <loviuz@gmail.com>
Date: Sun, 18 Dec 2022 21:00:23 +0100
Subject: [PATCH 1/3] =?UTF-8?q?Fix=20vulnerabilit=C3=A0=20XSS?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 modules/impostazioni/edit.php | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/modules/impostazioni/edit.php b/modules/impostazioni/edit.php
index 48fed2254..34125f034 100755
--- a/modules/impostazioni/edit.php
+++ b/modules/impostazioni/edit.php
@@ -31,7 +31,11 @@ echo '
 <div class="row">
     <div class="col-md-6 col-md-offset-3">
         <div class="input-group">
-            <input type="text" class="form-control" placeholder="'.tr('Ricerca rapida').'" id="ricerca_impostazioni" value="'.$ricerca.'"/>
+            '.input([
+                'type' => 'text',
+                'name' => 'ricerca_impostazioni',
+                'value' => $ricerca
+            ]).'
             <div class="input-group-btn">
                 <button class="btn btn-primary" type="button">
                     <span class="fa fa-search"></span>

From 7e7bbc8023ab96a3d167789e4d01b92d1391976d Mon Sep 17 00:00:00 2001
From: Beppe <cjbeppe87@gmail.com>
Date: Mon, 19 Dec 2022 15:17:36 +0100
Subject: [PATCH 2/3] Aggiunta nazioni

---
 update/2_4_39.sql | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/update/2_4_39.sql b/update/2_4_39.sql
index a0f286fd7..fc3cd40c9 100644
--- a/update/2_4_39.sql
+++ b/update/2_4_39.sql
@@ -60,3 +60,6 @@ ALTER TABLE `an_anagrafiche` CHANGE `codicerea` `codicerea` VARCHAR(23) DEFAULT
 -- Pulizia campi inutilizzati
 ALTER TABLE `an_anagrafiche` DROP `cciaa`;
 ALTER TABLE `an_anagrafiche` DROP `cciaa_citta`;
+
+-- Aggiunta nazioni
+INSERT INTO `an_nazioni` (`id`, `nome`, `iso2`, `created_at`, `name`) VALUES (NULL, 'Palestina', 'PS', NULL, 'Palestine');
\ No newline at end of file

From 0e98ba0638afb4297f3583e5701779424be3dcb4 Mon Sep 17 00:00:00 2001
From: Pek5892 <pek5892@gmail.com>
Date: Thu, 22 Dec 2022 11:59:33 +0100
Subject: [PATCH 3/3] Fix minore

---
 templates/magazzino_inventario/body.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/magazzino_inventario/body.php b/templates/magazzino_inventario/body.php
index e36aaba57..1b6df8f0e 100755
--- a/templates/magazzino_inventario/body.php
+++ b/templates/magazzino_inventario/body.php
@@ -106,7 +106,7 @@ foreach ($data['results'] as $r) {
             <td class="text-right">'.moneyFormat($valore_magazzino).'</td>
         </tr>';
 
-    $totale_qta += $r['qta_totale'];
+    $totale_qta += $r['Q.tà'];
     $totali[] = $valore_magazzino;
 }