SID & start_form() cleanup.
authorJanusz Dobrowolski <janusz@frontaccounting.eu>
Mon, 16 Mar 2009 19:44:31 +0000 (19:44 +0000)
committerJanusz Dobrowolski <janusz@frontaccounting.eu>
Mon, 16 Mar 2009 19:44:31 +0000 (19:44 +0000)
47 files changed:
.htaccess
access/logout.php
admin/attachments.php
admin/backups.php
admin/create_coy.php
admin/inst_lang.php
admin/inst_module.php
admin/view_print_transaction.php
admin/void_transaction.php
dimensions/inquiry/search_dimensions.php
gl/bank_transfer.php
gl/gl_bank.php
gl/inquiry/gl_trial_balance.php
gl/manage/exchange_rates.php
inventory/adjustments.php
inventory/cost_update.php
inventory/inquiry/stock_movements.php
inventory/inquiry/stock_status.php
inventory/manage/item_codes.php
inventory/manage/sales_kits.php
inventory/prices.php
inventory/purchasing_data.php
inventory/reorder_level.php
inventory/transfers.php
manufacturing/inquiry/bom_cost_inquiry.php
manufacturing/manage/bom_edit.php
manufacturing/search_work_orders.php
manufacturing/work_order_issue.php
purchasing/allocations/supplier_allocate.php
purchasing/inquiry/po_search.php
purchasing/inquiry/po_search_completed.php
purchasing/inquiry/supplier_allocation_inquiry.php
purchasing/inquiry/supplier_inquiry.php
purchasing/po_entry_items.php
purchasing/po_receive_items.php
purchasing/supplier_credit.php
purchasing/supplier_invoice.php
purchasing/supplier_payment.php
sales/allocations/customer_allocate.php
sales/credit_note_entry.php
sales/customer_credit_invoice.php
sales/customer_delivery.php
sales/customer_invoice.php
sales/includes/ui/sales_credit_ui.inc
sales/inquiry/customer_allocation_inquiry.php
sales/inquiry/sales_deliveries_view.php
sales/inquiry/sales_orders_view.php

index b923b02e3372d8c329c9ae9e204b063d653cc1de..03410fbc3a34c234d1e457f64a2668d91d5bec1f 100644 (file)
--- a/.htaccess
+++ b/.htaccess
@@ -4,6 +4,8 @@
 # register_globals ON
 php_flag magic_quotes_gpc Off
 php_flag register_globals Off
+# do not use SID in url
+php_flag session.use_trans_sid Off
 
 #Sometimes neccessary to add those
 #
index 716bbfe18dcb1ce60b6fa3fb3dbf7ff4852d5fd5..46357a1524ed6ad543b9f8da030c573428afdc5b 100644 (file)
@@ -40,7 +40,7 @@ page(_("Logout"), true, false, "", get_js_png_fix());
   <tr>
     <td><div align="center">
         <?php
-     echo "<a href='$path_to_root/index.php?" . SID ."'><b>" . _("Click here to Login Again.") . "</b></a>";
+     echo "<a href='$path_to_root/index.php'><b>" . _("Click here to Login Again.") . "</b></a>";
 ?>
       </div></td>
   </tr>
index 8f517e8aafc46b0a6f6a272e17b90dd9804cd586..12bab6511915adf8c9854d1adf910765174fb431 100644 (file)
@@ -144,7 +144,7 @@ if ($Mode == 'RESET')
 
 function viewing_controls()
 {
-    start_form(false, true);
+    start_form();
 
     start_table("class='tablestyle_noborder'");
 
index f13531931b06bdf62a1b4817208f6324a458276c..4644245843e4b89bed474980c978e52c1514342d 100644 (file)
@@ -32,7 +32,7 @@ handle_form($db_connections[$db_name]);
 page(_("Backup and Restore Database"), false, false, '', '', true);
 
 //-------------------------------------------------------------------------------
-start_form(true, true);
+start_form(true);
 
 $cmb = get_backup_file_combo();
 $compr = get_compr_combo();
index 8ec0fc4a73d7f63deaaa4a22eaa8112991ff30a8..eec636487124d29189ea3176a75d149372529ad3 100644 (file)
@@ -264,7 +264,7 @@ function display_company_edit($selected_id)
        else
                $n = count($db_connections);
 
-       start_form(true, true);
+       start_form(true);
 
        echo "
                <script language='javascript'>
index ccdd3d8e31245d3e56c739c87ff01ff41ce75446..b5d5c16a33f816a38766d5ae7e373eade7357ff5 100644 (file)
@@ -297,7 +297,7 @@ function display_language_edit($selected_id)
        else
                $n = count($installed_languages);
 
-       start_form(true, true);
+       start_form(true);
 
        echo "
                <script language='javascript'>
index 809252dff1defdde0d7d1c53d1862e961dfd135b..622f5305395dab621790ae4a20d4c1573cd888f9 100644 (file)
@@ -314,7 +314,7 @@ function display_module_edit($selected_id)
        else
                $n = count($installed_modules);
 
-       start_form(true, true);
+       start_form(true);
 
        echo "
                <script language='javascript'>
index 98bf8d9e7ca9f188437189b4e7089bceef1f0b26..b9931d449228c3cfc42e64359d0c13c7835cdf94 100644 (file)
@@ -160,7 +160,7 @@ if (isset($_POST['ProcessSearch']))
 
 //----------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form(false);
        viewing_controls();
        handle_search();
 end_form(2);
index 3d967ec2c7d94c8f2ca71436e6cd71f27e89c19b..31f8506b462e51e007a805c286f5af0d5a4ffcf4 100644 (file)
@@ -102,7 +102,7 @@ function voiding_controls()
 {
        global $table_style2;
        
-       start_form(false, true);
+       start_form();
 
        start_table($table_style2);
 
index 67bffa5e4dc96a765b2f96279bb050cf969d9a14..8e43471fd5975754ad390a2a111b0c80b18c0c66 100644 (file)
@@ -65,7 +65,7 @@ if (isset($_GET["stock_id"]))
 
 //--------------------------------------------------------------------------------------
 
-start_form(false, true, $_SERVER['PHP_SELF'] ."?outstanding_only=" . $outstanding_only . SID);
+start_form(false, false, $_SERVER['PHP_SELF'] ."?outstanding_only=$outstanding_only");
 
 start_table("class='tablestyle_noborder'");
 start_row();
index c390f7a09e91fcbfaea936046d2d51443b932921..36e28a6a899b4d3ac7f137f7048d96cec394b492 100644 (file)
@@ -56,7 +56,7 @@ function gl_payment_controls()
        global $table_style2;
        $home_currency = get_company_currency();
 
-       start_form(false, true);
+       start_form();
 
        start_table($table_style2, 5, 7);
        echo "<tr><td valign=top>"; // outer table
index fa78eeb26db77bdec79af878302dda8b94536a63..ff7f196a5d69b91be5184bd7088d5d13bd2ad09c 100644 (file)
@@ -276,7 +276,7 @@ if (isset($_POST['go']))
 }
 //-----------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 display_bank_header($_SESSION['pay_items']);
 
index 27fc37df0e70b185ccf17a2f85d094e64c31fa70..093307c945cdc8e07c961b75cc0c3cf8afd792ba 100644 (file)
@@ -121,7 +121,7 @@ function display_trial_balance()
                        continue;
                alt_table_row_color($k);
 
-               $url = "<a href='$path_to_root/gl/inquiry/gl_account_inquiry.php?" . SID . "TransFromDate=" . $_POST["TransFromDate"] . "&TransToDate=" . $_POST["TransToDate"] . "&account=" . $account["account_code"] . "'>" . $account["account_code"] . "</a>";
+               $url = "<a href='$path_to_root/gl/inquiry/gl_account_inquiry.php?TransFromDate=" . $_POST["TransFromDate"] . "&TransToDate=" . $_POST["TransToDate"] . "&account=" . $account["account_code"] . "'>" . $account["account_code"] . "</a>";
 
                label_cell($url);
                label_cell($account["account_name"]);
index 493509f9d7a339eb3da2c23638b11b05972984db..19ac833e686cbe7e520bbe0a51e0f12eca9d0e87 100644 (file)
@@ -170,7 +170,7 @@ if ($Mode == 'Delete')
 
 //---------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 if (!isset($_POST['curr_abrev']))
        $_POST['curr_abrev'] = get_global_curr_code();
index bf3f290f7611978caf8bf8d9a4d8b2af54417d1b..bd8f1bed85e48ecf1f745584fc5c59104b8949a7 100644 (file)
@@ -217,7 +217,7 @@ if (isset($_GET['NewAdjustment']) || !isset($_SESSION['adj_items']))
 }
 
 //-----------------------------------------------------------------------------------------------
-start_form(false, true);
+start_form();
 
 display_order_header($_SESSION['adj_items']);
 
index c35e81b518f9c0a047815f907daefdd1af8b9013..0cf4fb6d9b0983ce1cab5bada9b675ec1db35f74 100644 (file)
@@ -77,7 +77,7 @@ if (list_updated('stock_id'))
        $Ajax->activate('cost_table');
 //-----------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 if (!isset($_POST['stock_id']))
        $_POST['stock_id'] = get_global_stock_item();
index e9c05c49126a4fb98d04c5acc82fa1245f2eaa89..cd225d52af779f7390dd66e9b3ada0815a8bde48 100644 (file)
@@ -39,7 +39,7 @@ if (isset($_GET['stock_id']))
        $_POST['stock_id'] = $_GET['stock_id'];
 }
 
-start_form(false, true);
+start_form();
 
 if (!isset($_POST['stock_id']))
        $_POST['stock_id'] = get_global_stock_item();
index 9c8aff5b546e4487f64d04cb93f27121377190b7..8707396520864b407b3803a7fddc31998195bad8 100644 (file)
@@ -33,7 +33,7 @@ if (list_updated('stock_id'))
 
 check_db_has_stock_items(_("There are no items defined in the system."));
 
-start_form(false, true);
+start_form();
 
 if (!isset($_POST['stock_id']))
        $_POST['stock_id'] = get_global_stock_item();
index 4b9fcd79f3c3c974ada87431011f4cf7cd02da5a..ce802e2ca4fbb2ee1804066e34d391f650670fd9 100644 (file)
@@ -97,7 +97,7 @@ if (list_updated('stock_id'))
 
 //--------------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 if (!isset($_POST['stock_id']))
        $_POST['stock_id'] = get_global_stock_item();
index 6040fcd81295a642353fbd0c9f8acad23faf2134..59ca9e4d502466082ac0edbc18e0facbf31cb7ab 100644 (file)
@@ -181,7 +181,7 @@ if ($Mode == 'RESET')
 
 //--------------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 echo "<center>" . _("Select a sale kit:") . "&nbsp;";
 sales_kits_list('item_code', null, _('New kit'), true);
index fb323a470c1225fa281847315d48103a929b9dc7..67de34c86365d93db8959bad546e1c4b4683d691 100644 (file)
@@ -48,7 +48,7 @@ if (!isset($_POST['curr_abrev']))
 
 //---------------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 if (!isset($_POST['stock_id']))
        $_POST['stock_id'] = get_global_stock_item();
index 85e8adedc254d2ffeb71bcadf6b303e12ef3314d..4371c8290d8bf567b3d69427249c6b65c83e8dcf 100644 (file)
@@ -116,7 +116,7 @@ if (list_updated('stock_id'))
        $Ajax->activate('price_table');
 //--------------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 if (!isset($_POST['stock_id']))
        $_POST['stock_id'] = get_global_stock_item();
index 2c5de4649b89bff04e03e418201e9bdd47170ac9..7fe5f7d90bebaccb87a373ac4c8415de4caec9c0 100644 (file)
@@ -35,7 +35,7 @@ if (list_updated('stock_id'))
 }
 //------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 if (!isset($_POST['stock_id']))
        $_POST['stock_id'] = get_global_stock_item();
index 299f4802be44843ebcf32a9ae58a0d0471543e91..897b647cc076d257ef5b876af5ef8a47e6a2177b 100644 (file)
@@ -219,7 +219,7 @@ if (isset($_GET['NewTransfer']) || !isset($_SESSION['transfer_items']))
 }
 
 //-----------------------------------------------------------------------------------------------
-start_form(false, true);
+start_form();
 
 display_order_header($_SESSION['transfer_items']);
 
index 02b25d4a977599992924e135c2d94d4d46e3afb0..cedfe23b0bb3e7628195947fb0751ec689bd3fe5 100644 (file)
@@ -27,7 +27,7 @@ if (isset($_GET['stock_id']))
        $_POST['stock_id'] = $_GET['stock_id'];
 } 
 
-start_form(false, true));
+start_form();
 echo "<center> " . _("Item:") . " ";   
 stock_bom_items_list('stock_id', $_POST['stock_id'], false, true);
 
index 84f60733f7d2a1b4e84874414efeb8b516abc525..3b2e70d6043e839c5b98e488e0b046bc85efe45e 100644 (file)
@@ -213,7 +213,7 @@ if ($Mode == 'RESET')
 
 //--------------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 echo "<center>" . _("Select a manufacturable item:") . "&nbsp;";
 stock_bom_items_list('stock_id', null, false, true);
@@ -233,10 +233,8 @@ if (get_post('stock_id') != '')
 
 start_form();
        display_bom_items($selected_parent);
-//end_form();
        //--------------------------------------------------------------------------------------
        echo '<br>';
-//     start_form(false, true);
 
        start_table($table_style2);
 
index 15b466ce12131f7929430dc130e355e3576c2a30..348d283f356245f40452a547cebceb6fcd1f6a30 100644 (file)
@@ -60,7 +60,7 @@ if (isset($_GET["stock_id"]))
 
 //--------------------------------------------------------------------------------------
 
-start_form(false, false, $_SERVER['PHP_SELF'] ."?outstanding_only=" . $outstanding_only .SID);
+start_form(false, false, $_SERVER['PHP_SELF'] ."?outstanding_only=$outstanding_only");
 
 start_table("class='tablestyle_noborder'");
 start_row();
index ee2b295015cee0ff5314a6b57a9f24de3186a833..1d994381aa44eb6d2a07679658d2c4dce1be3c8c 100644 (file)
@@ -205,7 +205,7 @@ if (isset($_GET['trans_no']))
 display_wo_details($_SESSION['issue_items']->order_id);
 echo "<br>";
 
-start_form(false, true);
+start_form();
 
 start_table("$table_style width=90%", 10);
 echo "<tr><td>";
index 6a0e83e3247f65692914e0f381ad0f073928d7ce..8e3cabd430203efbdb3d7c04f7c43744b52f18ce 100644 (file)
@@ -185,7 +185,7 @@ function edit_allocations_for_transaction($type, $trans_no)
 {
        global $table_style;
 
-       start_form(false, true);
+       start_form();
 
     display_heading(_("Allocation of") . " " . systypes::name($_SESSION['alloc']->type) . " # " . $_SESSION['alloc']->trans_no);
 
index 3f23f5bbad21c219c896130755e53661f8dff380..49c9b3067ec531e64d9a3340985c3d656b281d31 100644 (file)
@@ -55,7 +55,7 @@ if (get_post('SearchOrders'))
 
 //---------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 start_table("class='tablestyle_noborder'");
 start_row();
@@ -81,8 +81,7 @@ function trans_view($trans)
 function edit_link($row) 
 {
   return pager_link( _("Edit"),
-       "/purchasing/po_entry_items.php?" . SID 
-       . "ModifyOrderNumber=" . $row["order_no"], ICON_EDIT);
+       "/purchasing/po_entry_items.php?ModifyOrderNumber=" . $row["order_no"], ICON_EDIT);
 }
 
 function prt_link($row)
@@ -93,8 +92,7 @@ function prt_link($row)
 function receive_link($row) 
 {
   return pager_link( _("Receive"),
-       "/purchasing/po_receive_items.php?" . SID 
-       . "PONumber=" . $row["order_no"], ICON_RECEIVE);
+       "/purchasing/po_receive_items.php?PONumber=" . $row["order_no"], ICON_RECEIVE);
 }
 
 function check_overdue($row)
index c949d469818f5fa77a3bf693985daee136dc0cb2..a9ca0c56d69f8c5968369c70f67f6232725fa21f 100644 (file)
@@ -53,7 +53,7 @@ if (get_post('SearchOrders'))
 }
 //---------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 start_table("class='tablestyle_noborder'");
 start_row();
index 55ab1678c676deb0b6142dd8a9f02664ea41f5e5..4ede5ca03c68040dd6b05c96d2e10013705686d0 100644 (file)
@@ -37,7 +37,7 @@ if (isset($_GET['ToDate']))
 
 //------------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 if (!isset($_POST['supplier_id']))
        $_POST['supplier_id'] = get_global_supplier();
index cc94acd238ff55bee9ae7bfb68e2bb4abc60e1ed..6814bba431f5a11b886d6ce9c2da714ea0faadaf 100644 (file)
@@ -35,7 +35,7 @@ if (isset($_GET['ToDate'])){
 
 //------------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 if (!isset($_POST['supplier_id']))
        $_POST['supplier_id'] = get_global_supplier();
index 2cb5a364d1b3b530e35df356bc220ea85cfa42da..a394281ce16a1db6abef0adc7d1082659aa72ccc 100644 (file)
@@ -397,7 +397,7 @@ if (isset($_GET['NewOrder']))
 
 //---------------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 display_po_header($_SESSION['PO']);
 echo "<br>";
index c8680d8586e31eae9ddb182524a577d772a97b4b..78bbff9a01ec290fa78bcb922c5989a021ecb1e0 100644 (file)
@@ -302,7 +302,7 @@ if (isset($_POST['ProcessGoodsReceived']))
 
 //--------------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 display_grn_summary($_SESSION['PO'], true);
 display_heading(_("Items to Receive"));
index fc16875ce1b1214053447a7cdc30d8ad56c7ac94..625b9e4d9192c64003385e31ac23b7deb018d7f0 100644 (file)
@@ -319,7 +319,7 @@ if (isset($_POST['go']))
 
 //--------------------------------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 
 invoice_header($_SESSION['supp_trans']);
 if ($_POST['supplier_id']=='') 
index 148e7b92b9b18aec0ad0a0b6e71ebf0af0c94e44..34f1520481852fe6f4e53047ed5c36e03804349a 100644 (file)
@@ -384,7 +384,7 @@ if (isset($_POST['go']))
        $Ajax->activate('inv_tot');
 }
 
-start_form(false, true);
+start_form();
 
 invoice_header($_SESSION['supp_trans']);
 
index 0834f2a12c4f4d3b255b1262614bf707938fb27b..3dad427c768aeacff2891f598f929df084983763 100644 (file)
@@ -73,7 +73,7 @@ if (isset($_GET['AddedID']))
 function display_controls()
 {
        global $table_style2;
-       start_form(false, true);
+       start_form();
 
        if (!isset($_POST['supplier_id']))
                $_POST['supplier_id'] = get_global_supplier(false);
index c0785cb1a80d71f88cdb510d750eb2d306296a6e..e8a5c5eced3130886f1f1042a37917f7520b7db3 100644 (file)
@@ -195,7 +195,7 @@ function edit_allocations_for_transaction($type, $trans_no)
 
     echo "<br>";
 
-       start_form(false, true);
+       start_form();
        div_start('alloc_tbl');
     if (count($_SESSION['alloc']->allocs) > 0)
     {
index c53a080d7e31b760b85e937d9104795e0ad09082..63c5ea2ff8541054ba58c6adee7781d097200cc1 100644 (file)
@@ -260,7 +260,7 @@ if (!processing_active()) {
 
 //-----------------------------------------------------------------------------
 
-start_form(false, true);
+start_form();
 hidden('cart_id');
 
 $customer_error = display_credit_header($_SESSION['Items']);
index 4959c23c6ae515fbfd2952fb09d62696cded95af..2371574806ada508b86dd11a203cbe3b73abcd2b 100644 (file)
@@ -229,7 +229,7 @@ function display_credit_items()
 {
        global $table_style, $table_style2;
 
-    start_form(false, true);
+    start_form();
        hidden('cart_id');
 
        start_table("$table_style2 width=80%", 5);
index ae077419e07c752119f5500a454244c53d6d002f..97f4ce02708825333bac399ddd9e9e1ca0778d75 100644 (file)
@@ -307,7 +307,7 @@ if (isset($_POST['Update']) || isset($_POST['_Location_update'])) {
        $Ajax->activate('Items');
 }
 //------------------------------------------------------------------------------
-start_form(false, true);
+start_form();
 hidden('cart_id');
 
 start_table("$table_style2 width=80%", 5);
index d935978f202439f181dee5653b6228fe63367e21..9836de48fad516e4330dcd2c0eb17b8a60b08a55 100644 (file)
@@ -334,7 +334,7 @@ $dspans[] = $spanlen;
 $is_batch_invoice = count($_SESSION['Items']->src_docs) > 1;
 
 $is_edition = $_SESSION['Items']->trans_type == 10 && $_SESSION['Items']->trans_no != 0;
-start_form(false, true);
+start_form();
 hidden('cart_id');
 
 start_table("$table_style2 width=80%", 5);
index 4594758c583518a69c564dc97c671946342fd5ca..d27fd0a90ebd6a64d0c210077c5edd6fc7c43083 100644 (file)
@@ -187,7 +187,7 @@ function display_credit_items($title, &$order)
        {
            alt_table_row_color($k);
 
-           label_cell("<a target='_blank' href='$path_to_root/inventory/inquiry/stock_status.php?" . SID . "stock_id=" . $line->stock_id . "'>$line->stock_id</a>");
+           label_cell("<a target='_blank' href='$path_to_root/inventory/inquiry/stock_status.php?stock_id=" . $line->stock_id . "'>$line->stock_id</a>");
            label_cell($line->item_description, "nowrap");
            qty_cell($line->qty_dispatched, false, get_qty_dec($line->stock_id));
            label_cell($line->units);
index 325d848ffd82b5a76cb8f5d3afe8dda68186ee85..614cebe7db9ad66fff5058cea8031acfd6510d7d 100644 (file)
@@ -34,7 +34,7 @@ if (isset($_GET['customer_id']))
 if (!isset($_POST['customer_id']))
        $_POST['customer_id'] = get_global_customer();
 
-start_form(false, true);
+start_form();
 
 start_table("class='tablestyle_noborder'");
 start_row();
index 4ea1a8241aa8d770f7ef9e9d3a8b8aa123399da2..36eaf06318c6658d14b3d56ad7c82e4eabeacb9e 100644 (file)
@@ -96,7 +96,7 @@ if (get_post('_DeliveryNumber_changed'))
 
 //-----------------------------------------------------------------------------------
 
-start_form(false, false, $_SERVER['PHP_SELF'] ."?OutstandingOnly=" . $_POST['OutstandingOnly'] .SID);
+start_form(false, false, $_SERVER['PHP_SELF'] ."?OutstandingOnly=".$_POST['OutstandingOnly']);
 
 start_table("class='tablestyle_noborder'");
 start_row();
index 125cae8c51bfb44334f6362b547b35295a2cf359..6422d690d4eb7607c07b3634b37950bf66c9a88f 100644 (file)
@@ -91,25 +91,25 @@ function prt_link($row)
 function edit_link($row) 
 {
   return pager_link( _("Edit"),
-    "/sales/sales_order_entry.php?" . SID . "ModifyOrderNumber=" . $row['order_no'], ICON_EDIT);
+    "/sales/sales_order_entry.php?ModifyOrderNumber=" . $row['order_no'], ICON_EDIT);
 }
 
 function dispatch_link($row)
 {
   return pager_link( _("Dispatch"),
-       "/sales/customer_delivery.php?" . SID . "OrderNumber=" .$row['order_no'], ICON_DOC);
+       "/sales/customer_delivery.php?OrderNumber=" .$row['order_no'], ICON_DOC);
 }
 
 function invoice_link($row)
 {
   return pager_link( _("Invoice"),
-       "/sales/sales_order_entry.php?" . SID . "NewInvoice=" .$row["order_no"], ICON_DOC);
+       "/sales/sales_order_entry.php?NewInvoice=" .$row["order_no"], ICON_DOC);
 }
 
 function delivery_link($row)
 {
   return pager_link( _("Delivery"),
-       "/sales/sales_order_entry.php?" . SID . "NewDelivery=" .$row['order_no'], ICON_DOC);
+       "/sales/sales_order_entry.php?NewDelivery=" .$row['order_no'], ICON_DOC);
 }
 
 function tmpl_checkbox($row)
@@ -170,7 +170,7 @@ if (get_post('_OrderNumber_changed')) // enable/disable selection controls
        $Ajax->activate('orders_tbl');
 }
 
-start_form(false, false, $_SERVER['PHP_SELF'] .SID);
+start_form();
 
 start_table("class='tablestyle_noborder'");
 start_row();