- WHERE debtor_no='$debtorno'
- AND branch_code='$branchcode'
- AND (type=10 or type=11)
- AND tran_date >='$date'";
-
+ WHERE debtor_no=".db_escape($debtorno)."
+ AND branch_code=".db_escape($branchcode)."
+ AND (type=".ST_SALESINVOICE." OR type=".ST_CUSTCREDIT.")
+ AND trandate >='$date'";
+