Fixing bug in Sales Invoice and Sales Delivery when Cash Sales and document date...

[fa-stable.git] / includes / ui / ui_msgs.inc

diff --git a/includes/ui/ui_msgs.inc b/includes/ui/ui_msgs.inc
index a0c1aff4252b960cfdaf7c6b9342dc15cd2bf989..58e3df3078fcce5743f655970b2edc8e65d879e3 100644 (file)
--- a/includes/ui/ui_msgs.inc
+++ b/includes/ui/ui_msgs.inc
@@ -1,5 +1,14 @@
 <?php
-
+/**********************************************************************
+    Copyright (C) FrontAccounting, LLC.
+       Released under the terms of the GNU General Public License, GPL, 
+       as published by the Free Software Foundation, either version 3 
+       of the License, or (at your option) any later version.
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
+    See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
+***********************************************************************/
 function display_error($msg, $center=true)
 {
        trigger_error($msg, E_USER_ERROR);
@@ -20,6 +29,11 @@ function display_notification_centered($msg)
        display_notification($msg, true);
 }
 
+function display_caption($msg)
+{
+       echo "<caption>$msg</caption>\n";
+}
+
 function display_heading($msg)
 {
        echo "<center><span class='headingtext'>$msg</span></center>\n";        
@@ -46,7 +60,7 @@ function stock_item_heading($stock_id)
 {
        if ($stock_id != "") 
        {
-               $result = db_query("SELECT description, units FROM ".TB_PREF."stock_master WHERE stock_id='$stock_id'");                
+               $result = db_query("SELECT description, units FROM ".TB_PREF."stock_master WHERE stock_id=".db_escape($stock_id));
         $myrow = db_fetch_row($result);
         
        display_heading("$stock_id - $myrow[0]"); 
@@ -55,4 +69,3 @@ function stock_item_heading($stock_id)
        }
 }
 
-?>
\ No newline at end of file