[Weberp-cvs] SF.net SVN: web-erp:[3810] trunk

[<tim...@us...>]

Revision: 3810
          http://web-erp.svn.sourceforge.net/web-erp/?rev=3810&view=rev
Author:   tim_schofield
Date:     2010-09-27 21:02:09 +0000 (Mon, 27 Sep 2010)

Log Message:
-----------
SQL quoting corrections and layout changes and improvements

Modified Paths:
--------------
    trunk/SupplierTypes.php
    trunk/doc/Change.log.html

Modified: trunk/SupplierTypes.php
===================================================================
--- trunk/SupplierTypes.php	2010-09-27 20:52:13 UTC (rev 3809)
+++ trunk/SupplierTypes.php	2010-09-27 21:02:09 UTC (rev 3810)
@@ -64,7 +64,7 @@
 
 		$sql = "UPDATE suppliertype
 			SET typename = '" . $_POST['typename'] . "'
-			WHERE typeid = '$SelectedType'";
+			WHERE typeid = '" . $SelectedType . "'";
 
 		$msg = _('The supplier type') . ' ' . $SelectedType . ' ' .  _('has been updated');
 	} elseif ( $InputError !=1 ) {
@@ -137,7 +137,7 @@
 
 } elseif ( isset($_GET['delete']) ) {
 
-	$sql = "SELECT COUNT(*) FROM suppliers WHERE supptype='$SelectedType'";
+	$sql = "SELECT COUNT(*) FROM suppliers WHERE supptype='" . $SelectedType . "'";
 
 	$ErrMsg = _('The number of suppliers using this Type record could not be retrieved because');
 	$result = DB_query($sql,$db,$ErrMsg);
@@ -147,7 +147,7 @@
 			_('There are') . ' ' . $myrow[0] . ' ' . _('suppliers with this type code'));
 	} else {
 
-		$sql="DELETE FROM suppliertype WHERE typeid='$SelectedType'";
+		$sql="DELETE FROM suppliertype WHERE typeid='" . $SelectedType . "'";
 		$ErrMsg = _('The Type record could not be deleted because');
 		$result = DB_query($sql,$db,$ErrMsg);
 		prnMsg(_('Supplier type') . $SelectedType  . ' ' . _('has been deleted') ,'success');
@@ -169,7 +169,7 @@
 	$sql = 'SELECT typeid, typename FROM suppliertype';
 	$result = DB_query($sql,$db);
 
-	echo '<br><table class=selection>';
+	echo '<table class=selection>';
 	echo "<tr>
 		<th>" . _('Type ID') . "</th>
 		<th>" . _('Type Name') . "</th>
@@ -210,7 +210,7 @@
 if (! isset($_GET['delete'])) {
 
 	echo "<form method='post' action=" . $_SERVER['PHP_SELF'] . '?' . SID . '>';
-	echo '<p><table class=selection>'; //Main table
+	echo '<br /><table class=selection>'; //Main table
 	echo '<td>'; // First column
 
 
@@ -221,7 +221,7 @@
 		$sql = "SELECT typeid,
 			       typename
 		        FROM suppliertype
-		        WHERE typeid='$SelectedType'";
+		        WHERE typeid='" . $SelectedType . "'";
 
 		$result = DB_query($sql, $db);
 		$myrow = DB_fetch_array($result);

Modified: trunk/doc/Change.log.html
===================================================================
--- trunk/doc/Change.log.html	2010-09-27 20:52:13 UTC (rev 3809)
+++ trunk/doc/Change.log.html	2010-09-27 21:02:09 UTC (rev 3810)
@@ -1,5 +1,6 @@
 <p><font SIZE=4 COLOR=BLUE><b>webERP Change Log</b></font></p>
 <p></p>
+<p>27/09/10 Tim: SupplierTypes.php - SQL quoting corrections and layout changes and improvements</p>
 <p>27/09/10 Tim: SupplierTransInquiry.php - New script to show detail supplier transactions</p>
 <p>27/09/10 Tim: SupplierTenders.php - SQL quoting corrections</p>
 <p>27/09/10 Tim: Suppliers.php - SQL quoting corrections</p>


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.