Moved all SQL statements from PHP files into relevant *_db.inc files.

[fa-stable.git] / admin / print_profiles.php

diff --git a/admin/print_profiles.php b/admin/print_profiles.php
index 05e5b70ad00f529acefcc4ba5e8af889b2f15b3d..5b387534800efcf551e00e0e15f6d34872f7ba5a 100644 (file)
--- a/admin/print_profiles.php
+++ b/admin/print_profiles.php
@@ -1,11 +1,21 @@
 <?php
-$page_security = 15;
-$path_to_root="..";
+/**********************************************************************
+    Copyright (C) FrontAccounting, LLC.
+       Released under the terms of the GNU General Public License, GPL, 
+       as published by the Free Software Foundation, either version 3 
+       of the License, or (at your option) any later version.
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
+    See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
+***********************************************************************/
+$page_security = 'SA_PRINTPROFILE';
+$path_to_root = "..";
 include($path_to_root . "/includes/session.inc");
 include($path_to_root . "/admin/db/printers_db.inc");
 include($path_to_root . "/includes/ui.inc");
 
-page(_("Printing Profiles"));
+page(_($help_context = "Printing Profiles"));
 
 $selected_id = get_post('profile_id','');
 
@@ -67,7 +77,7 @@ function check_delete($name)
 {
 // check if selected profile is used by any user
        if ($name=='') return 0; // cannot delete system default profile
-       $sql = "SELECT * FROM ".TB_PREF."users WHERE print_profile='$name'";
+       $sql = "SELECT * FROM ".TB_PREF."users WHERE print_profile=".db_escape($name);
        $res = db_query($sql,'cannot check printing profile usage');
        return db_num_rows($res);
 }
@@ -150,7 +160,7 @@ foreach(get_reports() as $rep => $descr)
     label_cell($descr == '' ? '???<sup>1)</sup>' : _($descr));
        $_POST['Prn'.$rep] = isset($prints[$rep]) ? $prints[$rep] : '';
     echo '<td>';
-       printers_list('Prn'.$rep, null, 
+       echo printers_list('Prn'.$rep, null, 
                $rep == '' ? _('Browser support') : _('Default'));
        echo '</td>';
        if ($descr == '') $unkn = 1;
@@ -164,10 +174,10 @@ else
 
 div_start('controls');
 if (get_post('profile_id') == '') {
-       submit_center('submit', _("Add New Profile"), true, '', true);
+       submit_center('submit', _("Add New Profile"), true, '', 'default');
 } else {
        submit_center_first('submit', _("Update Profile"), 
-         _('Update printer profile'), true);
+         _('Update printer profile'), 'default');
        submit_center_last('delete', _("Delete Profile"), 
          _('Delete printer profile (only if not used by any user)'), true);
 }