SF.net SVN: ledger-smb: [1444] trunk/LedgerSMB/CT.pm

[..hidden..]

Revision: 1444
          http://ledger-smb.svn.sourceforge.net/ledger-smb/?rev=1444&view=rev
Author:   einhverfr
Date:     2007-07-26 22:07:34 -0700 (Thu, 26 Jul 2007)

Log Message:
-----------
Correcting SQL Query errors for customer search, 1761615

Modified Paths:
--------------
    trunk/LedgerSMB/CT.pm

Modified: trunk/LedgerSMB/CT.pm
===================================================================
--- trunk/LedgerSMB/CT.pm	2007-07-26 20:42:18 UTC (rev 1443)
+++ trunk/LedgerSMB/CT.pm	2007-07-27 05:07:34 UTC (rev 1444)
@@ -484,15 +484,15 @@
     push @a, qw(name contact city state zipcode country notes phone email);
 
     if ( $form->{employee} ) {
-        $var = $form->like( lc $form->{employee} );
-        $where .= " AND lower(e.name) LIKE '$var'";
+        $var = $dbh->quote($form->like(lc $form->{employee}));
+        $where .= " AND lower(e.name) LIKE $var";
     }
 
     foreach $item (@a) {
 
         if ( $form->{$item} ne "" ) {
-            $var = $form->like( lc $form->{$item} );
-            $where .= " AND lower(ct.$item) LIKE '$var'";
+            $var = $dbh->quote($form->like( lc $form->{$item}) );
+            $where .= " AND lower(ct.$item) LIKE $var";
         }
     }
 


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.