lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

escape constant

Browse Source
This commit is contained in:
Mélina 2021-12-20 14:22:35 +01:00
parent a61585674a
commit d267d90ef7
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/takepos/ajax/ajax.php
View File

@ -125,7 +125,7 @@ if ($action == 'getProducts') {
if ($conf->global->TAKEPOS_PRODUCT_IN_STOCK == 1) {
$sql .= ' LEFT JOIN '.MAIN_DB_PREFIX.'product_stock as ps';
$sql .= ' ON (p.rowid = ps.fk_product';
$sql .= " AND ps.fk_entrepot = ".((int) $conf->global->{'CASHDESK_ID_WAREHOUSE'.$_SESSION['takeposterminal']}) . ')';
$sql .= " AND ps.fk_entrepot = ".((int) $db->escape($conf->global->{'CASHDESK_ID_WAREHOUSE'.$_SESSION['takeposterminal']})) . ')';
}
$sql .= ' WHERE entity IN ('.getEntity('product').')';
if ($filteroncategids) {