Bugzilla – Attachment 24276 Details for
Bug 11549
After transferring an order, receive and cancel the receipt will delete the order
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 11549: Interpolate variables into SQL statements should not be allowed
Bug-11549-Interpolate-variables-into-SQL-statement.patch (text/plain), 970 bytes, created by
Jonathan Druart
on 2014-01-14 11:19:37 UTC
(
hide
)
Description:
Bug 11549: Interpolate variables into SQL statements should not be allowed
Filename:
MIME Type:
Creator:
Jonathan Druart
Created:
2014-01-14 11:19:37 UTC
Size:
970 bytes
patch
obsolete
>From f926e4507cea5cf2c1c808c61875eca1e27bc29a Mon Sep 17 00:00:00 2001 >From: Jonathan Druart <jonathan.druart@biblibre.com> >Date: Tue, 14 Jan 2014 12:13:31 +0100 >Subject: [PATCH] Bug 11549: Interpolate variables into SQL statements should > not be allowed > >--- > C4/Acquisition.pm | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > >diff --git a/C4/Acquisition.pm b/C4/Acquisition.pm >index 8e1e9d4..67ea46e 100644 >--- a/C4/Acquisition.pm >+++ b/C4/Acquisition.pm >@@ -1805,7 +1805,7 @@ sub TransferOrder { > my $dbh = C4::Context->dbh; > my ($query, $sth, $rv); > >- $query = qq{ >+ $query = q{ > UPDATE aqorders > SET datecancellationprinted = CAST(NOW() AS date) > WHERE ordernumber = ? >@@ -1824,7 +1824,7 @@ sub TransferOrder { > WHERE ordernumber = ? > }, {}, $newordernumber ); > >- $query = qq{ >+ $query = q{ > UPDATE aqorders_items > SET ordernumber = ? > WHERE ordernumber = ? >-- >1.7.10.4
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 11549
:
24274
|
24275
|
24276
|
24402
|
24403
|
24404
|
24487
|
24503
|
24546
|
24547
|
24548
|
24549