X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=CHANGELOG.txt;h=6e1977d998626f1ab18171f5d104d6d7d096b68b;hb=8ea6c4dd0d9b31b3456d012b0c94339b801bee0c;hp=0c79678fe348356f5c49bf819ca80fd18326d652;hpb=f48dce88b74eb81e3398d9f36eee19394c4f023c;p=fa-stable.git

diff --git a/CHANGELOG.txt b/CHANGELOG.txt
index 0c79678f..6e1977d9 100644
--- a/CHANGELOG.txt
+++ b/CHANGELOG.txt
@@ -19,12 +19,110 @@ Legend:
 ! -> Note
 $ -> Affected files
 
+18-Oct-2009 Janusz Dobrowolski (merged changes for 2.1.7 from main branch)
+! Added html_entity_decode() in db_escape() for correct INSERT>SELECT>INSERT sequences.
+$ /includes/db/connect_db.inc
+# Fixed warnings on first page display
+$ /admin/company_preferences.php
+# Fixed erroneous message
+$ /gl/manage/gl_account_types.php
+# Security sql statements update against sql injection attacks.
+$ /admin/attachments.php
+  /admin/payment_terms.php
+  /admin/print_profiles.php
+  /admin/printers.php
+  /admin/shipping_companies.php
+  /admin/view_print_transaction.php
+  /admin/db/company_db.inc
+  /admin/db/printers_db.inc
+  /admin/db/voiding_db.inc
+  /admin/db/users_db.inc
+  /dimensions/includes/dimensions_db.inc
+  /dimensions/inquiry/search_dimensions.php
+  /gl/bank_account_reconcile.php
+  /gl/gl_budget.php
+  /gl/includes/db/gl_db_account_types.inc
+  /gl/includes/db/gl_db_accounts.inc
+  /gl/includes/db/gl_db_bank_accounts.inc
+  /gl/includes/db/gl_db_bank_trans.inc
+  /gl/includes/db/gl_db_banking.inc
+  /gl/includes/db/gl_db_currencies.inc
+  /gl/includes/db/gl_db_rates.inc
+  /gl/includes/db/gl_db_trans.inc
+  /gl/inquiry/bank_inquiry.php
+  /gl/view/bank_transfer_view.php
+  /gl/view/gl_trans_view.php
+  /inventory/cost_update.php
+  /inventory/purchasing_data.php
+  /inventory/includes/db/items_category_db.inc
+  /inventory/includes/db/items_codes_db.inc
+  /inventory/includes/db/items_db.inc
+  /inventory/includes/db/items_locations_db.inc
+  /inventory/includes/db/items_prices_db.inc
+  /inventory/includes/db/items_trans_db.inc
+  /inventory/includes/db/items_units_db.inc
+  /inventory/includes/db/movement_types_db.inc
+  /inventory/inquiry/stock_movements.php
+  /inventory/manage/item_categories.php
+  /inventory/manage/item_units.php
+  /inventory/manage/items.php
+  /inventory/manage/locations.php
+  /inventory/manage/movement_types.php
+  /manufacturing/search_work_orders.php
+  /manufacturing/includes/db/work_centres_db.inc
+  /manufacturing/includes/db/work_order_issues_db.inc
+  /manufacturing/includes/db/work_order_produce_items_db.inc
+  /manufacturing/includes/db/work_order_requirements_db.inc
+  /manufacturing/includes/db/work_orders_db.inc
+  /manufacturing/includes/db/work_orders_quick_db.inc
+  /manufacturing/inquiry/where_used_inquiry.php
+  /manufacturing/manage/bom_edit.php
+  /manufacturing/manage/work_centres.php
+  /purchasing/po_entry_items.php
+  /purchasing/po_receive_items.php
+  /purchasing/supplier_credit.php
+  /purchasing/supplier_invoice.php
+  /purchasing/includes/purchasing_db.inc
+  /purchasing/includes/db/grn_db.inc
+  /purchasing/includes/db/invoice_db.inc
+  /purchasing/includes/db/invoice_items_db.inc
+  /purchasing/includes/db/po_db.inc
+  /purchasing/includes/db/supp_trans_db.inc
+  /purchasing/includes/db/suppalloc_db.inc
+  /purchasing/includes/db/suppliers_db.inc
+  /purchasing/inquiry/po_search.php
+  /purchasing/inquiry/po_search_completed.php
+  /purchasing/inquiry/supplier_allocation_inquiry.php
+  /purchasing/inquiry/supplier_inquiry.php
+  /purchasing/manage/suppliers.php
+
+12-Oct-2009 Janusz Dobrowolski (merged)
+# Fixed sql injection vulnerability on some php/mysql configurations
+$ /admin/db/users_db.inc
+! Single quotes also encoded before database data insert
+$ /admin/db/maintenance_db.inc
+  /includes/db/connect_db.inc
+  /reporting/includes/tcpdf.php
+  /sales/includes/cart_class.inc
+
+16-Oct-2009 Janusz Dobrowolski
++ Access control system description.
+$ /doc/access_levels.txt (new)
+
+14-Oct-2009 Janusz Dobrowolski
+# [0000173] Missing global systypes_array declaration.
+$ /purchasing/allocations/supplier_allocate.php
+
+14-Oct-2009 Joe Hunt
+# [0000172] Difference between Customer Balances and Print Statements
+$ /reporting/rep108.pp
+
 13-Oct-2009 Janusz Dobrowolski
 # Fixed default page access.
 $ /sales/inquiry/sales_orders_view.php
 
 13-Oct-2009 Joe Hunt
-+ Added discrete users online in footer (from Wish List Forum)
++ Added discrete users online in footer (from Wish List Forum) (New rerun)
 $ /admin/db/users_db.inc
   /sql/alter2.2.sql
   /sql/en_US-new.sql
@@ -32,6 +130,10 @@ $ /admin/db/users_db.inc
   /themes/aqua/renderer.php
   /themes/cool/renderer.php
   /themes/default/renderer.php
+! Changed Tag types in reports_classes to be the same as defined in types.inc. Suitable height=5
+$ /reporting/includes/reports_classes.inc
+! Code cleanup (old code removed)
+$ /includes/ui_view.inc
   
 12-Oct-2009 Janusz Dobrowolski
 # Fixed sql injection vulnerability on some php/mysql configurations
@@ -42,7 +144,7 @@ $ /gl/includes/db/gl_db_account_types.inc
   /gl/manage/gl_account_classes.php
   /gl/manage/gl_account_types.php
   /gl/manage/gl_accounts.php
-# [0000169] Removed sparse session var unset firing error.
+# [0000169],[0000174] Removed sparse session var unset firing error.
   /sales/allocations/customer_allocation_main.php
   /purchasing/allocations/supplier_allocation_main.php