X-Git-Url: https://delta.frontaccounting.com/gitweb/?p=fa-stable.git;a=blobdiff_plain;f=includes%2Fdb%2Fclass.reflines_db.inc;h=277ebe74dbe2f8dce456f6fc8d0adf9510d9bfff;hp=f67aa60ac62fca8ede2c2c4bf842a90d3bbdca91;hb=2bcdab793e406bb5a44d2c4e079ec7cc2a1aa857;hpb=85cdc977a80b32727c13aae517f58437e908a033

diff --git a/includes/db/class.reflines_db.inc b/includes/db/class.reflines_db.inc
index f67aa60a..277ebe74 100644
--- a/includes/db/class.reflines_db.inc
+++ b/includes/db/class.reflines_db.inc
@@ -153,7 +153,7 @@ class reflines_db extends data_set {
 	function find_refline_id($reference, $type, $fallback=true)
 	{
 		$sql = "SELECT * FROM ".TB_PREF."reflines WHERE trans_type=".db_escape($type)
-			." AND CHAR_LENGTH(`prefix`) AND LEFT('$reference', CHAR_LENGTH(`prefix`)) = `prefix`";
+			." AND CHAR_LENGTH(`prefix`) AND LEFT(".db_escape($reference).", CHAR_LENGTH(`prefix`)) = `prefix`";
 		if ($fallback)	// if not found return refline with empty prefix
 			$sql .= " UNION SELECT * FROM ".TB_PREF."reflines WHERE trans_type=".db_escape($type)." AND `prefix`=''";
 		$ret = db_query($sql, "cannot check reference line id");