From 631de455a4d542d48bb2aff3806858d222e64c0e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?M=C3=A9lina?= <melina@melina.altairis.net>
Date: Mon, 13 Dec 2021 16:51:53 +0100
Subject: [PATCH] Change line 136

---
 htdocs/takepos/ajax/ajax.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/htdocs/takepos/ajax/ajax.php b/htdocs/takepos/ajax/ajax.php
index 6cc9ef7f5fd..556c1a25646 100644
--- a/htdocs/takepos/ajax/ajax.php
+++ b/htdocs/takepos/ajax/ajax.php
@@ -133,7 +133,8 @@ if ($action == 'getProducts') {
 	$sql .= ' AND tosell = 1';
 	if ($conf->global->TAKEPOS_PRODUCT_IN_STOCK == 1) {
 		$sql .= ' AND reel > 0';
-		$sql .= ' AND fk_entrepot ='.$conf->global->{'CASHDESK_ID_WAREHOUSE'.$_SESSION['takeposterminal']};
+		$sql .= ' AND fk_entrepot ='.$db->escape($conf->global->{'CASHDESK_ID_WAREHOUSE'.$_SESSION['takeposterminal']});
+		
 	}
 	$sql .= natural_search(array('ref', 'label', 'barcode'), $term);
 	$resql = $db->query($sql);