X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;ds=sidebyside;f=sales%2Fincludes%2Fdb%2Fcust_trans_details_db.inc;h=9296a04cb028affccf837a62aac6118eb80a56d5;hb=0c1ab57c09d87eed2bd248892dbfe3f256767a82;hp=4300e94bed65ae836b7b7aa091b2d738e156993a;hpb=1481d782477692fd972cc1c13b6585a95971769f;p=fa-stable.git

diff --git a/sales/includes/db/cust_trans_details_db.inc b/sales/includes/db/cust_trans_details_db.inc
index 4300e94b..9296a04c 100644
--- a/sales/includes/db/cust_trans_details_db.inc
+++ b/sales/includes/db/cust_trans_details_db.inc
@@ -19,13 +19,13 @@ if (!is_array($debtor_trans_no))
 	$sql = "SELECT ".TB_PREF."debtor_trans_details.*,
 		".TB_PREF."debtor_trans_details.unit_price+".TB_PREF."debtor_trans_details.unit_tax AS FullUnitPrice,
 		".TB_PREF."debtor_trans_details.description As StockDescription,
-		".TB_PREF."stock_master.units
-		FROM ".TB_PREF."debtor_trans_details,".TB_PREF."stock_master
+		".TB_PREF."stock_master.units, ".TB_PREF."stock_master.mb_flag
+		FROM ".TB_PREF."debtor_trans_details, ".TB_PREF."stock_master
 		WHERE (";
 
 	$tr=array();
 	foreach ($debtor_trans_no as $trans_no)
-		$tr[] = 'debtor_trans_no='.$trans_no;
+		$tr[] = 'debtor_trans_no='.db_escape($trans_no);
 
 	$sql .= implode(' OR ', $tr);