Alexander Nicolaysen Sørnes
917851fceb
Fix naming of OutputEditor() to be outputEditor()
2007-01-17 03:18:49 +00:00
Chris Morgan
e3f9e5371a
Use query_parameters() in SQL select, update and delete statements to protect against
...
sql injection attacks
2006-06-27 19:16:27 +00:00
Chris Morgan
fb0f3b5dd3
Protect against sql injection attacks in sql INSERT statements
2006-06-24 04:20:32 +00:00
Chris Morgan
67550405c3
Make code more consistent by making it follow the appdb coding standards. Fix some spaces vs. tabs odd indenting.
2006-06-21 01:04:12 +00:00
Tony Lambregts
40138af1a8
Let users browse vendors and remove some duplicate code
2005-10-25 00:47:32 +00:00
Jonathan Ernst
06ea1b6d3d
Security fixes. Ensure that numeric values are actually numeric using is_numeric
...
so users can't login as admin by passing in non-numeric values.
2005-03-23 23:56:38 +00:00
Jonathan Ernst
3eb69ee3af
Remove an unneeded check in vendor class
2005-02-09 02:21:41 +00:00
Jonathan Ernst
5fc48e8106
- use vendor class in vendor admin
...
- improve existing vendor admin
- fix adding a vendor which was broken
- allow editing of a vendor
2005-02-07 23:54:29 +00:00
Jonathan Ernst
792151c574
- add version and vendor classes
...
- much improved application class (same model as the other new classes I made)
- modified category class
- modified some files to use the new classes and methods
- deletes linked elements on cascade
2005-02-06 17:49:48 +00:00
