- $sql = "UPDATE ".TB_PREF."sales_types SET sales_type = '$name',
- tax_included =$tax_included WHERE id = $id";
+
+ $sql = "UPDATE ".TB_PREF."sales_types SET sales_type = ".db_escape($name).",
+ tax_included =$tax_included, factor=$factor WHERE id = $id";