X-Git-Url: http://git.harvie.cz/?a=blobdiff_plain;f=assistants%2Fstore.inc.php;h=f9725765a16739dd2e05fc020aa8f72d862bd321;hb=6f7943a08cc115d137c5777408259009433ea8ca;hp=fcc420f55aadaf440831f5a135bb02281504c7ff;hpb=fbf1a4e63bb82818dcebfa9b7a26a71c1c8de17e;p=mirrors%2FSokoMan.git

diff --git a/assistants/store.inc.php b/assistants/store.inc.php
index fcc420f..f972576 100644
--- a/assistants/store.inc.php
+++ b/assistants/store.inc.php
@@ -1,8 +1,9 @@
 <?php
 switch($SUBPATH[0]) {
 	default: case 1:
+		$barcode = isset($_GET['barcode']) ? htmlspecialchars($_GET['barcode']) : ''; //TODO: XSS
 		echo $this->html->form("$URL/2", 'GET', array(
-			array('barcode','','text',false,'autofocus','model_barcode:'),
+			array('barcode',$barcode,'text',false,'autofocus','model_barcode:'),
 			array('quantity','1','text',false,false,'quantity:'),
 			array(false,'STORE','submit')
 		));