X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=includes%2Fui%2Fui_msgs.inc;h=58e3df3078fcce5743f655970b2edc8e65d879e3;hb=refs%2Fremotes%2Fgithub%2Fmaster;hp=8925c030ba4954248e3f88cb9f4876e936281d23;hpb=a5242af68e65661edb7175412444dce536a7f311;p=fa-stable.git

diff --git a/includes/ui/ui_msgs.inc b/includes/ui/ui_msgs.inc
index 8925c030..58e3df30 100644
--- a/includes/ui/ui_msgs.inc
+++ b/includes/ui/ui_msgs.inc
@@ -29,6 +29,11 @@ function display_notification_centered($msg)
 	display_notification($msg, true);
 }
 
+function display_caption($msg)
+{
+	echo "<caption>$msg</caption>\n";
+}
+
 function display_heading($msg)
 {
 	echo "<center><span class='headingtext'>$msg</span></center>\n";	
@@ -55,7 +60,7 @@ function stock_item_heading($stock_id)
 {
 	if ($stock_id != "") 
 	{
-		$result = db_query("SELECT description, units FROM ".TB_PREF."stock_master WHERE stock_id='$stock_id'");		
+		$result = db_query("SELECT description, units FROM ".TB_PREF."stock_master WHERE stock_id=".db_escape($stock_id));
         $myrow = db_fetch_row($result);
         
     	display_heading("$stock_id - $myrow[0]"); 
@@ -64,4 +69,3 @@ function stock_item_heading($stock_id)
 	}
 }
 
-?>
\ No newline at end of file