From 2a5bf3d76ebad27d37a9d1f40c5d1e8617249316 Mon Sep 17 00:00:00 2001 From: Janusz Dobrowolski Date: Sun, 12 Dec 2010 17:06:40 +0000 Subject: [PATCH] Fixed db error after last changes related to bug 313 --- CHANGELOG.txt | 4 ++++ purchasing/includes/ui/po_ui.inc | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.txt b/CHANGELOG.txt index 289f734..edacf4a 100644 --- a/CHANGELOG.txt +++ b/CHANGELOG.txt @@ -19,6 +19,10 @@ Legend: ! -> Note $ -> Affected files +12-Dec-2010 Janusz Dobrowolski +# [0000318] Database error after last changes related to bu 313 +$ /purchasing/includes/ui/po_ui.inc + ------------------------------- Release 2.3 ------------------------------------ 09-Dec-2010 Joe Hunt ! Release 2.3.0 diff --git a/purchasing/includes/ui/po_ui.inc b/purchasing/includes/ui/po_ui.inc index 5f713a4..d5ae6fc 100644 --- a/purchasing/includes/ui/po_ui.inc +++ b/purchasing/includes/ui/po_ui.inc @@ -201,7 +201,7 @@ function display_po_header(&$order) /*If this is the first time the form loaded set up defaults */ //$_POST['StkLocation'] = $_SESSION['UserStockLocation']; - $sql = "SELECT delivery_address, phone FROM ".TB_PREF."locations WHERE loc_code='" . db_escape($_POST['StkLocation']) . "'"; + $sql = "SELECT delivery_address, phone FROM ".TB_PREF."locations WHERE loc_code=".db_escape($_POST['StkLocation']); $result = db_query($sql,"could not get location info"); if (db_num_rows($result) == 1) -- 2.30.2