Fixed security issues in file uploads.

[fa-stable.git] / taxes / db / tax_types_db.inc

diff --git a/taxes/db/tax_types_db.inc b/taxes/db/tax_types_db.inc
index 71096f32743c72be92210ab39b03247a4aa344b1..f42470eff9b5b3134a02d70e9520ad44e211510f 100644 (file)
--- a/taxes/db/tax_types_db.inc
+++ b/taxes/db/tax_types_db.inc
@@ -29,7 +29,7 @@ function update_tax_type($type_id, $name, $sales_gl_code, $purchasing_gl_code, $
        db_query($sql, "could not update tax type");
 }
 
-function get_all_tax_types()
+function get_all_tax_types($all=false)
 {
        $sql = "SELECT ".TB_PREF."tax_types.*,
                Chart1.account_name AS SalesAccountName,
@@ -39,6 +39,7 @@ function get_all_tax_types()
                WHERE ".TB_PREF."tax_types.sales_gl_code = Chart1.account_code
                AND ".TB_PREF."tax_types.purchasing_gl_code = Chart2.account_code";
 
+       if (!$all) $sql .= " AND !".TB_PREF."tax_types.inactive";
        return db_query($sql, "could not get all tax types");
 }
 
@@ -112,4 +113,18 @@ function is_tax_gl_unique($gl_code, $gl_code2=-1, $selected_id=-1) {
 
        return $gl_code2 == -1 ? ($row[0] <= 1) : ($row[0] == 0);
 }
+
+function is_tax_account($account_code)
+{
+       $sql= "SELECT id FROM ".TB_PREF."tax_types WHERE 
+               sales_gl_code=".db_escape($account_code)." OR purchasing_gl_code=".db_escape($account_code);
+       $result = db_query($sql, "checking account is tax account");
+       if (db_num_rows($result) > 0) {
+               $acct = db_fetch($result);
+               return $acct['id'];
+       } else
+               return false;
+}
+
+
 ?>
\ No newline at end of file