X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=SL%2FFU.pm;h=a9715dca028a186cd211cf1caa95f45a90ef6aad;hb=8e0f6e70;hp=8131a2cea069dcd1cbbceda2c4c94a8048091093;hpb=e03993be556024f24e5a4940fa08078ee8cd3840;p=kivitendo-erp.git diff --git a/SL/FU.pm b/SL/FU.pm index 8131a2cea..a9715dca0 100644 --- a/SL/FU.pm +++ b/SL/FU.pm @@ -28,7 +28,7 @@ sub save { $query = qq|INSERT INTO follow_ups (created_by, done, note_id, follow_up_date, created_for_user, id) VALUES ((SELECT id FROM employee WHERE login = ?), ?, ?, ?, ?, ?)|; - push @values, $form->{login}; + push @values, $::myconfig{login}; } else { $query = qq|UPDATE follow_ups SET done = ?, note_id = ?, follow_up_date = ?, created_for_user = ? WHERE id = ?|; @@ -119,7 +119,7 @@ sub retrieve { my $dbh = $form->get_standard_dbh($myconfig); my ($query, @values); - my ($employee_id) = selectrow_query($form, $dbh, qq|SELECT id FROM employee WHERE login = ?|, $form->{login}); + my ($employee_id) = selectrow_query($form, $dbh, qq|SELECT id FROM employee WHERE login = ?|, $::myconfig{login}); $query = qq|SELECT fu.*, n.subject, n.body, n.created_by FROM follow_ups fu LEFT JOIN notes n ON (fu.note_id = n.id) @@ -183,7 +183,7 @@ sub follow_ups { my $dbh = $form->get_standard_dbh($myconfig); my ($query, $where, $where_user); - my ($employee_id) = selectrow_query($form, $dbh, qq|SELECT id FROM employee WHERE login = ?|, $form->{login}); + my ($employee_id) = selectrow_query($form, $dbh, qq|SELECT id FROM employee WHERE login = ?|, $::myconfig{login}); my @values = (); my @values_user = (); @@ -210,7 +210,7 @@ sub follow_ups { foreach my $item (qw(subject body)) { next unless ($params{$item}); $where .= qq| AND (n.${item} ILIKE ?)|; - push @values, '%' . $params{$item} . '%'; + push @values, like($params{$item}); } if ($params{reference}) { @@ -219,7 +219,7 @@ sub follow_ups { WHERE (ful.follow_up_id = fu.id) AND (ful.trans_info ILIKE ?) LIMIT 1)|; - push @values, '%' . $params{reference} . '%'; + push @values, like($params{reference}); } if ($params{follow_up_date_from}) { @@ -314,13 +314,13 @@ sub link_details { if ($params{trans_type} eq 'customer') { $link = { - 'url' => 'controller.pl?action=CustomerVendor/edit&db=customer&id=' . $form->quote($params{trans_id}) . '&edit_note_id=' . $form->quote($params{note_id}), + 'url' => 'controller.pl?action=CustomerVendor/edit&db=customer&id=' . $form->quote($params{trans_id}) . '¬e_id=' . $form->quote($params{note_id}), 'title' => $locale->text('Customer') . " '$params{trans_info}'", }; } elsif ($params{trans_type} eq 'vendor') { $link = { - 'url' => 'controller.pl?action=CustomerVendor/edit&type=sales_quotation&id=' . $params{trans_id} . '&edit_note_id=' . $form->quote($params{note_id}), + 'url' => 'controller.pl?action=CustomerVendor/edit&db=vendor&id=' . $params{trans_id} . '¬e_id=' . $form->quote($params{note_id}), 'title' => $locale->text('Vendor') . " '$params{trans_info}'", }; @@ -424,7 +424,7 @@ sub save_access_rights { my $dbh = $form->get_standard_dbh($myconfig); - my ($id) = selectrow_query($form, $dbh, qq|SELECT id FROM employee WHERE login = ?|, $form->{login}); + my ($id) = selectrow_query($form, $dbh, qq|SELECT id FROM employee WHERE login = ?|, $::myconfig{login}); do_query($form, $dbh, qq|DELETE FROM follow_up_access WHERE what = ?|, $id); @@ -455,7 +455,7 @@ sub retrieve_access_rights { my $dbh = $form->get_standard_dbh($myconfig); - my $sth = prepare_execute_query($form, $dbh, qq|SELECT who FROM follow_up_access WHERE what = (SELECT id FROM employee WHERE login = ?)|, $form->{login}); + my $sth = prepare_execute_query($form, $dbh, qq|SELECT who FROM follow_up_access WHERE what = (SELECT id FROM employee WHERE login = ?)|, $::myconfig{login}); my $access = {}; while (my $ref = $sth->fetchrow_hashref()) {