MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
***********************************************************************/
-$page_security = 3;
-$path_to_root="../..";
+$page_security = 'SA_CRSTATUS';
+$path_to_root = "../..";
include($path_to_root . "/includes/session.inc");
page(_("Credit Status"));
function can_delete($selected_id)
{
$sql= "SELECT COUNT(*) FROM ".TB_PREF."debtors_master
- WHERE credit_status=$selected_id";
+ WHERE credit_status=".db_escape($selected_id);
$result = db_query($sql, "could not query customers");
$myrow = db_fetch_row($result);
if ($myrow[0] > 0)