Fixed date format in supplier transactions table.

[fa-stable.git] / dimensions / includes / dimensions_db.inc

diff --git a/dimensions/includes/dimensions_db.inc b/dimensions/includes/dimensions_db.inc
index 8ad1cfb1f35edf6ce29dd573f23acd805a743c56..2cd6af85d01725eaa468661cb8006a4492a21a6d 100644 (file)
--- a/dimensions/includes/dimensions_db.inc
+++ b/dimensions/includes/dimensions_db.inc
@@ -1,5 +1,14 @@
 <?php
-
+/**********************************************************************
+    Copyright (C) FrontAccounting, LLC.
+       Released under the terms of the GNU Affero General Public License,
+       AGPL, as published by the Free Software Foundation, either version 
+       3 of the License, or (at your option) any later version.
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
+    See the License here <http://www.gnu.org/licenses/agpl-3.0.html>.
+***********************************************************************/
 function add_dimension($reference, $name, $type_, $date_, $due_date, $memo_)
 {
        begin_transaction();
@@ -8,7 +17,7 @@ function add_dimension($reference, $name, $type_, $date_, $due_date, $memo_)
        $duedate = date2sql($due_date);
 
        $sql = "INSERT INTO ".TB_PREF."dimensions (reference, name, type_, date_, due_date)
-               VALUES ('$reference', '$name', $type_, '$date', '$duedate')";
+               VALUES (".db_escape($reference).", ".db_escape($name).", $type_, '$date', '$duedate')";
        db_query($sql, "could not add dimension");
 
        $id = db_insert_id();
@@ -29,7 +38,7 @@ function update_dimension($id, $name, $type_, $date_, $due_date, $memo_)
        $date = date2sql($date_);
        $duedate = date2sql($due_date);
 
-       $sql = "UPDATE ".TB_PREF."dimensions SET name='$name',
+       $sql = "UPDATE ".TB_PREF."dimensions SET name=".db_escape($name).",
                type_ = $type_,
                date_='$date',
                due_date='$duedate'