Keine Form-Variablen direkt in SQL-Queries verwenden.

[kivitendo-erp.git] / SL / OE.pm

diff --git a/SL/OE.pm b/SL/OE.pm
index 5b7c031..609f8a9 100644 (file)
--- a/SL/OE.pm
+++ b/SL/OE.pm
@@ -121,8 +121,6 @@ sub transactions {
   $sth->execute(@values) ||
     $form->dberror($query . " (" . join(", ", @values) . ")");
 
-  dump_query(0, "laqje", $query, @values);
-
   my %id = ();
   while (my $ref = $sth->fetchrow_hashref(NAME_lc)) {
     $ref->{exchangerate} = 1 unless $ref->{exchangerate};
@@ -1167,7 +1165,7 @@ sub order_details {
     $tax += $taxamount = $form->round_amount($taxaccounts{$item}, 2);
 
     push(@{ $form->{tax} }, $form->format_amount($myconfig, $taxamount, 2));
-    push(@{ $form->{taxdescription} }, $form->{"${item}_description"});
+    push(@{ $form->{taxdescription} }, $form->{"${item}_description"}  . q{ } . 100 * $form->{"${item}_rate"} . q{%});
     push(@{ $form->{taxrate} },
          $form->format_amount($myconfig, $form->{"${item}_rate"} * 100));
     push(@{ $form->{taxnumber} }, $form->{"${item}_taxnumber"});