From ba9f2104f19d6b467dcffcaa10f6a5e63f01b64e Mon Sep 17 00:00:00 2001
From: Moritz Bunkus <m.bunkus@linet-services.de>
Date: Tue, 12 Aug 2008 09:42:49 +0000
Subject: [PATCH] =?utf8?q?Datenbankupgrade=20f=C3=BCr=20Einf=C3=BChrung=20?=
 =?utf8?q?der=20Lagerverwaltung:=201.=20SQL-sicheres=20Quoten=20der=20Eing?=
 =?utf8?q?aben;=202.=20Beim=20Anlegen=20des=20Lagers=20alle=20Tabellenfeld?=
 =?utf8?q?er=20f=C3=BCllen,=20weil=20ansonsten=20sp=C3=A4ter=20das=20Lager?=
 =?utf8?q?=20nicht=20verf=C3=BCgbar=20erscheint.=20Fix=20f=C3=BCr=20Bug=20?=
 =?utf8?q?834.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

---
 sql/Pg-upgrade2/warehouse.pl | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/sql/Pg-upgrade2/warehouse.pl b/sql/Pg-upgrade2/warehouse.pl
index 6efbe145a..e205670c7 100644
--- a/sql/Pg-upgrade2/warehouse.pl
+++ b/sql/Pg-upgrade2/warehouse.pl
@@ -46,26 +46,28 @@ sub do_update {
   my $warehouse = $main::form->{import_warehouse} ne '' ? $main::form->{import_warehouse} : "Transfer";
   my $bin       = $main::form->{bin_default}      ne '' ? $main::form->{bin_default}      : "1";
 
+  $warehouse    = $dbh->quote($warehouse);
+  $bin          = $dbh->quote($bin);
 
   my $migration_code = <<EOF
 
 -- Adjust warehouse
-INSERT INTO warehouse (description) VALUES ('$warehouse');
+INSERT INTO warehouse (description, sortkey, invalid) VALUES ($warehouse, 1, FALSE);
 
 UPDATE tmp_parts SET bin = NULL WHERE bin = '';
 
 -- Restore old onhand
 INSERT INTO bin 
  (warehouse_id, description) 
- (SELECT DISTINCT warehouse.id, COALESCE(bin, '$bin') 
+ (SELECT DISTINCT warehouse.id, COALESCE(bin, $bin) 
    FROM warehouse, tmp_parts 
-   WHERE warehouse.description='$warehouse');
+   WHERE warehouse.description=$warehouse);
 INSERT INTO inventory 
  (warehouse_id, parts_id, bin_id, qty, employee_id, trans_id, trans_type_id)
  (SELECT warehouse.id, tmp_parts.id, bin.id, onhand, (SELECT id FROM employee LIMIT 1), nextval('id'), transfer_type.id 
   FROM transfer_type, warehouse, tmp_parts, bin
-  WHERE warehouse.description = '$warehouse' 
-    AND COALESCE(bin, '$bin') = bin.description 
+  WHERE warehouse.description = $warehouse
+    AND COALESCE(bin, $bin) = bin.description 
     AND transfer_type.description = 'stock');
 EOF
 ;
-- 
2.20.1