-
- $sql = "INSERT INTO ".TB_PREF."stock_moves (stock_id, trans_no, type, loc_code,
- tran_date, person_id, reference, qty, standard_cost, visible, price,
- discount_percent) VALUES ('$stock_id', $trans_no, $type,
- '$location', '$date', '$person_id', '$reference', $quantity, $std_cost,
+
+ $sql = "INSERT INTO ".TB_PREF."stock_moves (stock_id, trans_no, type, loc_code,
+ tran_date, person_id, reference, qty, standard_cost, visible, price,
+ discount_percent) VALUES ('$stock_id', $trans_no, $type,
+ ".db_escape($location).", '$date', '$person_id', ".db_escape($reference).", $quantity, $std_cost,