Changeset 725 for trunk/phpbms/modules/bms/include/invoices.php

Timestamp:

01/06/10 22:48:56 (2 years ago)

Author:

brieb

Message:

• Fixed more path disclosure and possible SQL injection bugs in the load search class

Files:

• trunk/phpbms/modules/bms/include/invoices.php (modified) (1 diff)

trunk/phpbms/modules/bms/include/invoices.php

@@ -649 +649 @@
                         $therecord = parent::getRecord($id, $useUuid);
 
+                        if(!$therecord["id"])
+                            $error = new appError(430, "Sales Order record '".$id."' does not exist", "No Record Available", true, true);
+
                         /**
                           *  If `type` is not an order and not a quote and payment information is being