Bug 905.

check_currency sicherer gemacht und eine aufrufschwäche in do.pl beseitigt.

diff --git a/SL/Form.pm b/SL/Form.pm
index d68bc71..355d60a 100644 (file)
--- a/SL/Form.pm
+++ b/SL/Form.pm
@@ -1628,6 +1628,10 @@ sub check_exchangerate {
 
   my ($self, $myconfig, $currency, $transdate, $fld) = @_;
 
+  if ($fld !~/^buy|sell$/) {
+    $self->error('Fatal: check_exchangerate called with invalid buy/sell argument');
+  }
+
   unless ($transdate) {
     $main::lxdebug->leave_sub();
     return "";

diff --git a/bin/mozilla/do.pl b/bin/mozilla/do.pl
index b3c9f10..29eff0e 100644 (file)
--- a/bin/mozilla/do.pl
+++ b/bin/mozilla/do.pl
@@ -655,6 +655,7 @@ sub invoice {
     $form->{title}  = $locale->text('Add Vendor Invoice');
     $form->{script} = 'ir.pl';
     $script         = "ir";
+    $buysell        = 'sell';
 
   } else {
     $form->{title}  = $locale->text('Add Sales Invoice');