$date = date2sql($date_);
$sql = "INSERT INTO ".TB_PREF."wo_manufacture (workorder_id, reference, quantity, date_)
- VALUES ($woid, ".db_quote($ref).", $quantity, '$date')";
+ VALUES ($woid, ".db_escape($ref).", $quantity, '$date')";
db_query($sql,"A work order manufacture could not be added");