Fix couple PHP notices

ajax/deploypackage_form.php

@@ -65,7 +65,7 @@
          $item = new $itemtype();
          $item->move_item($params);
       } else {
-         Toolbox::logDebug("package subtype not found : " . $params['itemtype']);
+         Toolbox::logDebug("package subtype not found : " . $itemtype);
          Html::displayErrorAndDie ("package subtype not found");
       }
 
@@ -86,14 +86,14 @@
       exit;
    }
 
-   if (!is_numeric($packages_id)) {
+   if (!is_numeric($packages_id) || intval($packages_id) <= 0) {
       Toolbox::logDebug("Error: orders_id in request is not an integer");
       Toolbox::logDebug(print_r($packages_id, true));
       exit;
    }
 
    $pfDeployPackage = new PluginFusioninventoryDeployPackage();
-   $pfDeployPackage->getFromDB($packages_id);
+   $pfDeployPackage->getFromDB(intval($packages_id));
 
    //TODO: In the displayForm function, $_REQUEST is somewhat too much for the '$datas' parameter
    // I think we could use only $order -- Kevin 'kiniou' Roy
@@ -107,7 +107,7 @@
    switch (filter_input(INPUT_POST, "subtype")) {
       case 'package_json_debug':
          if (isset($order->fields['json'])) {
-            $pfDeployPackage->displayJSONDebug();
+            echo $order->fields['json'];
          } else {
             echo "{}";
          }

ajax/dropdownactionselection.php

@@ -50,7 +50,7 @@
    header("Content-Type: text/html; charset=UTF-8");
    Html::header_nocache();
 }
-if (!defined('GLPI_ROOT')) {
+if (!defined('GLPI_ROOT') || !isset($CFG_GLPI)) {
    die("Can not acces directly to this file");
 }
 Session::checkCentralAccess();