Committed with db_escape instead of db_quote

[fa-stable.git] / includes / db / inventory_db.inc

diff --git a/includes/db/inventory_db.inc b/includes/db/inventory_db.inc
index 84893a11047c4b8f6d4c32b9d6ffce2ecf8dc892..562c8d1b1d866c970dc552026b5ec0cca685e4da 100644 (file)
--- a/includes/db/inventory_db.inc
+++ b/includes/db/inventory_db.inc
@@ -90,7 +90,7 @@ function add_stock_move($type, $stock_id, $trans_no, $location,
        $sql = "INSERT INTO ".TB_PREF."stock_moves (stock_id, trans_no, type, loc_code,
                tran_date, person_id, reference, qty, standard_cost, visible, price,
                discount_percent) VALUES ('$stock_id', $trans_no, $type,
-               ".db_quote($location).", '$date', '$person_id', ".db_quote($reference).", $quantity, $std_cost,
+               ".db_escape($location).", '$date', '$person_id', ".db_escape($reference).", $quantity, $std_cost,
                $show_or_hide, $price, $discount_percent)";
 
        if ($error_msg == "")