[Weberp-cvs] SF.net SVN: web-erp:[3811] trunk

[<tim...@us...>]

Revision: 3811
          http://web-erp.svn.sourceforge.net/web-erp/?rev=3811&view=rev
Author:   tim_schofield
Date:     2010-09-27 21:15:42 +0000 (Mon, 27 Sep 2010)

Log Message:
-----------
SQL quoting corrections and layout changes and improvements

Modified Paths:
--------------
    trunk/SelectSupplier.php
    trunk/SuppLoginSetup.php
    trunk/doc/Change.log.html

Modified: trunk/SelectSupplier.php
===================================================================
--- trunk/SelectSupplier.php	2010-09-27 21:02:09 UTC (rev 3810)
+++ trunk/SelectSupplier.php	2010-09-27 21:15:42 UTC (rev 3811)
@@ -176,7 +176,7 @@
 	echo "<br><a href=\"$rootpath/SupplierContacts.php?" . SID . '&SupplierID=' . $_SESSION['SupplierID'] . "\">" . _('Add/Modify/Delete Supplier Contacts') . '</a>';
 	echo '<br>';
 	echo "<br><a href='$rootpath/Shipments.php?" . SID . "&NewShipment=Yes'>" . _('Set Up A New Shipment') . '</a>';
-	echo "<br><a href='$rootpath/SuppLoginSetup.php?" . SID . "&NewShipment=Yes'>" . _('Supplier Login Configuration') . '</a>';
+	echo "<br><a href='$rootpath/SuppLoginSetup.php?" . SID . "'>" . _('Supplier Login Configuration') . '</a>';
 	echo '</td></tr></table>';
 } else {
 	// Supplier is not selected yet

Modified: trunk/SuppLoginSetup.php
===================================================================
--- trunk/SuppLoginSetup.php	2010-09-27 21:02:09 UTC (rev 3810)
+++ trunk/SuppLoginSetup.php	2010-09-27 21:15:42 UTC (rev 3811)
@@ -124,7 +124,7 @@
 						supplierid='" . $_POST['Supp'] ."',
 						phone='" . $_POST['Phone'] ."',
 						email='" . $_POST['Email'] ."',
-						password='".CryptPass($UpdatePassword)."',
+						" . $UpdatePassword .",
 						pagesize='" . $_POST['PageSize'] . "',
 						fullaccess=" . $_POST['Access'] . ",
 						theme='" . $_POST['Theme'] . "',
@@ -132,7 +132,7 @@
 						defaultlocation='" . $_POST['DefaultLocation'] ."',
 						modulesallowed='" . $ModulesAllowed . "',
 						blocked=" . $_POST['Blocked'] . "
-					WHERE userid = '$SelectedUser'";
+					WHERE userid = '" . $SelectedUser . "'";
 
 		prnMsg( _('The selected user record has been updated'), 'success' );
 	} elseif ($InputError !=1) {
@@ -158,11 +158,11 @@
 						'" . $_POST['Phone'] . "',
 						'" . $_POST['Email'] ."',
 						'" . $_POST['PageSize'] ."',
-						" . $_POST['Access'] . ",
+						'" . $_POST['Access'] . "',
 						'" . $_POST['DefaultLocation'] ."',
 						'" . date($_SESSION['DefaultDateFormat']) ."',
 						'" . $ModulesAllowed . "',
-						" . $_SESSION['DefaultDisplayRecordsMax'] . ",
+						'" . $_SESSION['DefaultDisplayRecordsMax'] . "',
 						'" . $_POST['Theme'] . "',
 						'". $_POST['UserLanguage'] ."')";
 		prnMsg( _('A new user record has been inserted'), 'success' );
@@ -206,7 +206,7 @@
 			prnMsg(_('Cannot delete user as entries already exist in the audit trail'), 'warn');
 		} else {
 
-			$sql="DELETE FROM www_users WHERE userid='$SelectedUser'";
+			$sql="DELETE FROM www_users WHERE userid='" . $SelectedUser . "'";
 			$ErrMsg = _('The User could not be deleted because');;
 			$result = DB_query($sql,$db,$ErrMsg);
 			prnMsg(_('User Deleted'),'info');
@@ -233,7 +233,7 @@
 		FROM www_users WHERE supplierid = '" . $_SESSION['SupplierID'] . "'";
 	$result = DB_query($sql,$db);
 
-	echo '<table>';
+	echo '<table class=selection>';
 	echo "<tr><th>" . _('User Login') . "</th>
 		<th>" . _('Full Name') . "</th>
 		<th>" . _('Telephone') . "</th>

Modified: trunk/doc/Change.log.html
===================================================================
--- trunk/doc/Change.log.html	2010-09-27 21:02:09 UTC (rev 3810)
+++ trunk/doc/Change.log.html	2010-09-27 21:15:42 UTC (rev 3811)
@@ -1,5 +1,6 @@
 <p><font SIZE=4 COLOR=BLUE><b>webERP Change Log</b></font></p>
 <p></p>
+<p>27/09/10 Tim: SuppLoginSetup.php - SQL quoting corrections and layout changes and improvements</p>
 <p>27/09/10 Tim: SupplierTypes.php - SQL quoting corrections and layout changes and improvements</p>
 <p>27/09/10 Tim: SupplierTransInquiry.php - New script to show detail supplier transactions</p>
 <p>27/09/10 Tim: SupplierTenders.php - SQL quoting corrections</p>


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.