From: Janusz Dobrowolski <janusz@frontaccounting.eu>
Date: Sun, 12 Dec 2010 17:06:40 +0000 (+0000)
Subject: Fixed db error after last changes related to bug 313
X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=commitdiff_plain;h=2a5bf3d76ebad27d37a9d1f40c5d1e8617249316;p=textcart.git

Fixed db error after last changes related to bug 313
---

diff --git a/CHANGELOG.txt b/CHANGELOG.txt
index 289f734..edacf4a 100644
--- a/CHANGELOG.txt
+++ b/CHANGELOG.txt
@@ -19,6 +19,10 @@ Legend:
 ! -> Note
 $ -> Affected files
 
+12-Dec-2010 Janusz Dobrowolski
+# [0000318] Database error after last changes related to bu 313
+$ /purchasing/includes/ui/po_ui.inc
+
 ------------------------------- Release 2.3 ------------------------------------
 09-Dec-2010 Joe Hunt
 ! Release 2.3.0
diff --git a/purchasing/includes/ui/po_ui.inc b/purchasing/includes/ui/po_ui.inc
index 5f713a4..d5ae6fc 100644
--- a/purchasing/includes/ui/po_ui.inc
+++ b/purchasing/includes/ui/po_ui.inc
@@ -201,7 +201,7 @@ function display_po_header(&$order)
     	/*If this is the first time the form loaded set up defaults */
 
         //$_POST['StkLocation'] = $_SESSION['UserStockLocation'];
-        $sql = "SELECT delivery_address, phone FROM ".TB_PREF."locations WHERE loc_code='" . db_escape($_POST['StkLocation']) . "'";
+        $sql = "SELECT delivery_address, phone FROM ".TB_PREF."locations WHERE loc_code=".db_escape($_POST['StkLocation']);
         $result = db_query($sql,"could not get location info");
 
         if (db_num_rows($result) == 1)