X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=inventory%2Fmanage%2Fitem_units.php;h=b8e432bc54f439ed20bb16d2e2d82f793da1f4e3;hb=ec44f448dbcfc82df87de4fd658b254670fad113;hp=61e4e685d6de346f3a37e5b3e4ab819556f8a46f;hpb=8259c324f645a39cb847d5a4346b70e225e1b02c;p=fa-stable.git

diff --git a/inventory/manage/item_units.php b/inventory/manage/item_units.php
index 61e4e685..b8e432bc 100644
--- a/inventory/manage/item_units.php
+++ b/inventory/manage/item_units.php
@@ -1,5 +1,4 @@
 <?php
-
 $page_security = 11;
 $path_to_root="../..";
 include($path_to_root . "/includes/session.inc");
@@ -33,7 +32,7 @@ if ($Mode=='ADD_ITEM' || $Mode=='UPDATE_ITEM')
 	}
 
 	if ($input_error !=1) {
-    	write_item_unit($selected_id, $_POST['abbr'], $_POST['description'], $_POST['decimals'] );
+    	write_item_unit(htmlentities($selected_id), $_POST['abbr'], $_POST['description'], $_POST['decimals'] );
 		if($selected_id != '')
 			display_notification(_('Selected unit has been updated'));
 		else
@@ -58,8 +57,8 @@ if ($Mode == 'Delete')
 	{
 		delete_item_unit($selected_id);
 		display_notification(_('Selected unit has been deleted'));
-		$Mode = 'RESET';
 	}
+	$Mode = 'RESET';
 }
 
 if ($Mode == 'RESET')
@@ -115,7 +114,6 @@ if ($selected_id != '')
 	}
 	hidden('selected_id', $selected_id);
 }
-
 if ($selected_id != '' && item_unit_used($selected_id)) {
     label_row(_("Unit Abbreviation:"), $_POST['abbr']);
     hidden('abbr', $_POST['abbr']);