X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=gl%2Fincludes%2Fdb%2Fgl_db_accounts.inc;h=6a41188c225c7847860a56cb97cc21b70ef77f62;hb=e9782c04faf09dd040dbc0c908cdb6e6d4f0dcfc;hp=921d53f1f5039172f7306be29aafcc895c75b7e7;hpb=d23fa06617d0ea628c14a02d08e8b85d711444a5;p=fa-stable.git

diff --git a/gl/includes/db/gl_db_accounts.inc b/gl/includes/db/gl_db_accounts.inc
index 921d53f1..6a41188c 100644
--- a/gl/includes/db/gl_db_accounts.inc
+++ b/gl/includes/db/gl_db_accounts.inc
@@ -112,6 +112,8 @@ function gl_account_in_company_defaults($acc)
 
 function gl_account_in_stock_category($acc)
 {
+	$acc = db_escape($acc);
+
 	$sql= "SELECT COUNT(*) FROM ".TB_PREF."stock_category WHERE 
 		dflt_inventory_act=$acc 
 		OR dflt_cogs_act=$acc
@@ -125,6 +127,8 @@ function gl_account_in_stock_category($acc)
 
 function gl_account_in_stock_master($acc)
 {
+	$acc = db_escape($acc);
+
 	$sql= "SELECT COUNT(*) FROM ".TB_PREF."stock_master WHERE 
 		inventory_account=$acc 
 		OR cogs_account=$acc
@@ -138,6 +142,8 @@ function gl_account_in_stock_master($acc)
 
 function gl_account_in_tax_types($acc)
 {
+	$acc = db_escape($acc);
+
 	$sql= "SELECT COUNT(*) FROM ".TB_PREF."tax_types WHERE sales_gl_code=$acc OR purchasing_gl_code=$acc";
 	$result = db_query($sql,"Couldn't test for existing tax GL codes");
 
@@ -147,6 +153,8 @@ function gl_account_in_tax_types($acc)
 
 function gl_account_in_cust_branch($acc)
 {
+	$acc = db_escape($acc);
+
 	$sql= "SELECT COUNT(*) FROM ".TB_PREF."cust_branch WHERE 
 		sales_account=$acc 
 		OR sales_discount_account=$acc
@@ -160,6 +168,8 @@ function gl_account_in_cust_branch($acc)
 
 function gl_account_in_suppliers($acc)
 {
+	$acc = db_escape($acc);
+
 	$sql= "SELECT COUNT(*) FROM ".TB_PREF."suppliers WHERE 
 		purchase_account=$acc
 		OR payment_discount_account=$acc
@@ -172,6 +182,8 @@ function gl_account_in_suppliers($acc)
 
 function gl_account_in_quick_entry_lines($acc)
 {
+	$acc = db_escape($acc);
+
 	$sql= "SELECT COUNT(*) FROM ".TB_PREF."quick_entry_lines WHERE 
 		dest_id=$acc AND UPPER(LEFT(action, 1)) <> 'T'";
 	$result = db_query($sql,"Couldn't test for existing Quick Entry Line GL codes");