X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=reporting%2Frep401.php;h=e72f163ce02037886435cd3e2cfd9f77c0e893c6;hb=6f8094c63f914fce9fcfd02780c452d712a2dba3;hp=8ae240e353ddcd682b970db7a3d7887b791281fb;hpb=d567a10b7925c8bb97c734e213d6651a979af29d;p=fa-stable.git

diff --git a/reporting/rep401.php b/reporting/rep401.php
index 8ae240e3..e72f163c 100644
--- a/reporting/rep401.php
+++ b/reporting/rep401.php
@@ -9,7 +9,7 @@
     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  
     See the License here <http://www.gnu.org/licenses/gpl-3.0.html>.
 ***********************************************************************/
-$page_security = 2;
+$page_security = 'SA_BOMREP';
 // ----------------------------------------------------------------
 // $ Revision:	2.0 $
 // Creator:	Joe Hunt
@@ -40,8 +40,8 @@ function getTransactions($from, $to)
 			".TB_PREF."stock_master,
 			".TB_PREF."bom
 		WHERE ".TB_PREF."stock_master.stock_id=".TB_PREF."bom.component
-		AND ".TB_PREF."bom.parent >= '$from'
-		AND ".TB_PREF."bom.parent <= '$to'
+		AND ".TB_PREF."bom.parent >= ".db_escape($from)."
+		AND ".TB_PREF."bom.parent <= ".db_escape($to)."
 		ORDER BY
 			".TB_PREF."bom.parent,
 			".TB_PREF."bom.component";