From 9894f4efdbb1ed2a10c33b6f4705ba1e9b35685c Mon Sep 17 00:00:00 2001
From: Moritz Bunkus <m.bunkus@linet-services.de>
Date: Tue, 26 May 2009 11:05:03 +0000
Subject: [PATCH] Datenbank-IDs in Formularen nicht durch "format_amount"
 jagen, sondern 1:1 speichern.

---
 SL/IC.pm                                    | 4 +---
 templates/webpages/ic/price_row_de.html     | 2 +-
 templates/webpages/ic/price_row_master.html | 2 +-
 3 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/SL/IC.pm b/SL/IC.pm
index 75e3191eb..430f56520 100644
--- a/SL/IC.pm
+++ b/SL/IC.pm
@@ -482,11 +482,9 @@ sub save {
       ) {
       #$klass = $form->parse_amount($myconfig, $form->{"klass_$i"});
       $price = $form->parse_amount($myconfig, $form->{"price_$i"});
-      $pricegroup_id =
-        $form->parse_amount($myconfig, $form->{"pricegroup_id_$i"});
       $query = qq|INSERT INTO prices (parts_id, pricegroup_id, price) | .
                qq|VALUES(?, ?, ?)|;
-      @values = (conv_i($form->{id}), conv_i($pricegroup_id), $price);
+      @values = (conv_i($form->{id}), conv_i($form->{"pricegroup_id_$i"}), $price);
       do_query($form, $dbh, $query, @values);
     }
   }
diff --git a/templates/webpages/ic/price_row_de.html b/templates/webpages/ic/price_row_de.html
index d4793087b..421256fa5 100644
--- a/templates/webpages/ic/price_row_de.html
+++ b/templates/webpages/ic/price_row_de.html
@@ -12,7 +12,7 @@
         <tr>
           <td width=50%><input type=hidden name="pricegroup_[% loop.count %]" size=30  value="[% HTML.escape(row.pricegroup) %]">[% HTML.escape(row.pricegroup) %]</td>
           <td width=50%><input name="price_[% loop.count %]" size=11 value="[% LxERP.format_amount(row.price, -2) %]"></td>
-          <input type=hidden name="pricegroup_id_[% loop.count %]" value="[% LxERP.format_amount(row.pricegroup_id, -2) %]">
+          <input type="hidden" name="pricegroup_id_[% loop.count %]" value="[% HTML.escape(row.pricegroup_id) %]">
         </tr>
 [%- END %]
       </table>
diff --git a/templates/webpages/ic/price_row_master.html b/templates/webpages/ic/price_row_master.html
index 2aa61ee31..56bae692b 100644
--- a/templates/webpages/ic/price_row_master.html
+++ b/templates/webpages/ic/price_row_master.html
@@ -12,7 +12,7 @@
         <tr>
           <td width=50%><input type=hidden name="pricegroup_[% loop.count %]" size=30  value="[% HTML.escape(row.pricegroup) %]">[% HTML.escape(row.pricegroup) %]</td>
           <td width=50%><input name="price_[% loop.count %]" size=11 value="[% LxERP.format_amount(row.price, -2) %]"></td>
-          <input type=hidden name="pricegroup_id_[% loop.count %]" value="[% LxERP.format_amount(row.pricegroup_id, -2) %]">
+          <input type="hidden" name="pricegroup_id_[% loop.count %]" value="[% HTML.escape(row.pricegroup_id) %]">
         </tr>
 [%- END %]
       </table>
-- 
2.20.1