X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=admin%2Fprint_profiles.php;h=1df47c67f512ca3a8c8c96e81a4d84c2e2c2dff6;hb=081465f30442afc4f008a1c7038bef320466a730;hp=49a8723ffb768e6933c9fbae4429d861b8ef958e;hpb=b17df731b4bb055c2fdd568bc4be9e5caa0ee07b;p=fa-stable.git

diff --git a/admin/print_profiles.php b/admin/print_profiles.php
index 49a8723f..1df47c67 100644
--- a/admin/print_profiles.php
+++ b/admin/print_profiles.php
@@ -1,21 +1,21 @@
 <?php
 /**********************************************************************
     Copyright (C) FrontAccounting, LLC.
-	Released under the terms of the GNU Affero General Public License,
-	AGPL, as published by the Free Software Foundation, either version 
-	3 of the License, or (at your option) any later version.
+	Released under the terms of the GNU General Public License, GPL, 
+	as published by the Free Software Foundation, either version 3 
+	of the License, or (at your option) any later version.
     This program is distributed in the hope that it will be useful,
     but WITHOUT ANY WARRANTY; without even the implied warranty of
     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
-    See the License here <http://www.gnu.org/licenses/agpl-3.0.html>.
+    See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
 ***********************************************************************/
-$page_security = 15;
-$path_to_root="..";
+$page_security = 'SA_PRINTPROFILE';
+$path_to_root = "..";
 include($path_to_root . "/includes/session.inc");
 include($path_to_root . "/admin/db/printers_db.inc");
 include($path_to_root . "/includes/ui.inc");
 
-page(_("Printing Profiles"));
+page(_($help_context = "Printing Profiles"));
 
 $selected_id = get_post('profile_id','');
 
@@ -77,7 +77,7 @@ function check_delete($name)
 {
 // check if selected profile is used by any user
 	if ($name=='') return 0; // cannot delete system default profile
-	$sql = "SELECT * FROM ".TB_PREF."users WHERE print_profile='$name'";
+	$sql = "SELECT * FROM ".TB_PREF."users WHERE print_profile=".db_escape($name);
 	$res = db_query($sql,'cannot check printing profile usage');
 	return db_num_rows($res);
 }
@@ -174,10 +174,10 @@ else
 
 div_start('controls');
 if (get_post('profile_id') == '') {
-	submit_center('submit', _("Add New Profile"), true, '', true);
+	submit_center('submit', _("Add New Profile"), true, '', 'default');
 } else {
 	submit_center_first('submit', _("Update Profile"), 
-	  _('Update printer profile'), true);
+	  _('Update printer profile'), 'default');
 	submit_center_last('delete', _("Delete Profile"), 
 	  _('Delete printer profile (only if not used by any user)'), true);
 }