X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=admin%2Fdb%2Fcompany_db.inc;h=621e986571a85afc31a3ccfcc60c8f735f598f2e;hb=8ea6c4dd0d9b31b3456d012b0c94339b801bee0c;hp=ed2b18f1356ae1653d1e319a7bf21d89160bbc04;hpb=4f57367b97832827258d1140ca423a26cf714142;p=fa-stable.git

diff --git a/admin/db/company_db.inc b/admin/db/company_db.inc
index ed2b18f1..621e9865 100644
--- a/admin/db/company_db.inc
+++ b/admin/db/company_db.inc
@@ -66,7 +66,7 @@ function update_company_gl_setup($retained_act, $profit_loss_act, $debtors_act,
 function update_company_setup($coy_name, $coy_no, $gst_no, $tax_prd, $tax_last, 
 	$postal_address, $phone, $fax, $email, $coy_logo, $domicile, $Dimension, 
 	$curr_default, $f_year, $no_item_list, $no_customer_list, $no_supplier_list, 
-	$base_sales, $time_zone, $add_pct, $round_to)
+	$base_sales, $time_zone, $add_pct, $round_to, $login_tout)
 {
 	if ($f_year == null)
 		$f_year = 0;
@@ -89,7 +89,8 @@ function update_company_setup($coy_name, $coy_no, $gst_no, $tax_prd, $tax_last,
 		base_sales=$base_sales,
 		time_zone=$time_zone,
 		add_pct=$add_pct,
-		round_to=$round_to
+		round_to=$round_to,
+		login_tout = ".db_escape($login_tout)."
 		WHERE coy_code=1";
 
 	db_query($sql, "The company setup could not be updated ");
@@ -120,14 +121,14 @@ function add_fiscalyear($from_date, $to_date, $closed)
 	$to = date2sql($to_date);
 
 	$sql = "INSERT INTO ".TB_PREF."fiscal_year (begin, end, closed)
-		VALUES (".db_escape($from).",".db_escape($to).", $closed)";
+		VALUES (".db_escape($from).",".db_escape($to).", ".db_escape($closed).")";
 
 	db_query($sql, "could not add fiscal year");
 }
 
 function update_fiscalyear($id, $closed)
 {
-	$sql = "UPDATE ".TB_PREF."fiscal_year SET closed=$closed
+	$sql = "UPDATE ".TB_PREF."fiscal_year SET closed=".db_escape($closed)."
 		WHERE id=".db_escape($id);
 
 	db_query($sql, "could not update fiscal year");
@@ -153,7 +154,7 @@ function get_current_fiscalyear()
 {
 	$year = get_company_pref('f_year');
 
-	$sql = "SELECT * FROM ".TB_PREF."fiscal_year WHERE id=$year";
+	$sql = "SELECT * FROM ".TB_PREF."fiscal_year WHERE id=".db_escape($year);
 
 	$result = db_query($sql, "could not get current fiscal year");
 
@@ -180,5 +181,16 @@ function get_base_sales_type()
 	return $myrow[0];
 }
 
+function get_company_extensions($id = -1) {
+	global $path_to_root;
+
+	$file = $path_to_root.($id == -1 ? '' : '/company/'.$id).'/installed_extensions.php';
+	$installed_extensions = array();
+	if (is_file($file)) {
+		include($file);
+	}
+	return $installed_extensions;
+}
+
 
 ?>
\ No newline at end of file