[Web-erp-svn] SF.net SVN: web-erp:[4474] trunk

[<dai...@us...>]

Revision: 4474
          http://web-erp.svn.sourceforge.net/web-erp/?rev=4474&view=rev
Author:   daintree
Date:     2011-01-23 04:38:44 +0000 (Sun, 23 Jan 2011)

Log Message:
-----------
PDFTopItems SQL quote fixes

Modified Paths:
--------------
    trunk/PDFTopItems.php
    trunk/doc/Change.log.html

Modified: trunk/PDFTopItems.php
===================================================================
--- trunk/PDFTopItems.php	2011-01-23 04:08:53 UTC (rev 4473)
+++ trunk/PDFTopItems.php	2011-01-23 04:38:44 UTC (rev 4474)
@@ -24,7 +24,7 @@
 				AND salesorderdetails.ActualDispatchDate >= DATE_SUB(CURDATE(), INTERVAL " . $_GET["numberofdays"] . " DAY)
 			GROUP BY salesorderdetails.stkcode
 			ORDER BY '" . $_GET['order'] . "' DESC
-			LIMIT 0,'" . $_GET['NumberOfTopItems'] . "'";
+			LIMIT 0," . $_GET['NumberOfTopItems'] ;
 } else { //the situation if only location type selected "All"
 	if ($_GET["location"] == "All") {
 		$SQL = "SELECT 	salesorderdetails.stkcode,
@@ -40,7 +40,7 @@
 						AND salesorderdetails.ActualDispatchDate >= DATE_SUB(CURDATE(), INTERVAL " . $_GET["numberofdays"] . " DAY)
 				GROUP BY salesorderdetails.stkcode
 				ORDER BY '" . $_GET['order'] . "' DESC
-				LIMIT 0,'" . $_GET['NumberOfTopItems'] . "'";
+				LIMIT 0," . $_GET['NumberOfTopItems'];
 	} else {
 		//the situation if the customer type selected "All"
 		if ($_GET["customers"] == "All") {
@@ -58,7 +58,7 @@
 						AND salesorderdetails.ActualDispatchDate >= DATE_SUB(CURDATE(), INTERVAL " . $_GET["numberofdays"] . " DAY)
 					GROUP BY salesorderdetails.stkcode
 					ORDER BY '" . $_GET['order'] . "' DESC
-					LIMIT 0,'" . $_GET['NumberOfTopItems'] . "'";
+					LIMIT 0," . $_GET['NumberOfTopItems'];
 		} else {
 			//the situation if the location and customer type not selected "All"
 			$SQL = "
@@ -76,7 +76,7 @@
 						AND salesorderdetails.ActualDispatchDate >= DATE_SUB(CURDATE(), INTERVAL " . $_GET["numberofdays"] . " DAY)
 					GROUP BY salesorderdetails.stkcode
 					ORDER BY '" . $_GET['order'] . "' DESC
-					LIMIT 0,'" . $_GET['NumberOfTopItems'] . "'";
+					LIMIT 0," . $_GET['NumberOfTopItems'];
 		}
 	}
 }
@@ -133,4 +133,4 @@
 	$pdf->Output('TopItems.pdf', 'I');
 }
 /*end of else not PrintPDF */
-?>
\ No newline at end of file
+?>

Modified: trunk/doc/Change.log.html
===================================================================
--- trunk/doc/Change.log.html	2011-01-23 04:08:53 UTC (rev 4473)
+++ trunk/doc/Change.log.html	2011-01-23 04:38:44 UTC (rev 4474)
@@ -1,5 +1,6 @@
 <p><font SIZE=4 COLOR=BLUE><b>webERP Change Log</b></font></p>
 <p></p>
+<p>23/1/11:Peter Otandeka: PDFTopItems.php  SQL quoting fixes</p>
 <p>23/1/11: phil Fix Depreciation posting and dates of end of periods</p>
 <p>23/1/11:Phil changed back references throughout several MRP scripts from is_date to Is_Date - as Is_Date is used throughout the code and much bigger job to change all references to is_date</p>
 <p>20/1/11: Tim changed back addinfo calls to addInfo on PDF reports - Zhigio originally thought to be an issue with Turkish utf-8 pdfs but turned out to be a red herring. class.pdf call changed back to addInfo too - most of calls had not been changed to lower case info</p>


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.