Umformatieren der Abfragen und Vermeidung von SQL injection durch Verwendung von...

[mfinanz.git] / SL / Form.pm

diff --git a/SL/Form.pm b/SL/Form.pm
index 9193e3356c9bd72920285051d56efe01c95b9cac..7636b16595b6ed42ca5efb4a4ec3191ec59602a3 100644 (file)
--- a/SL/Form.pm
+++ b/SL/Form.pm
@@ -2269,10 +2269,10 @@ sub get_history {
        my $i = 0;
        if ($trans_id ne "") {
                my $query =
-      qq|SELECT h.employee_id, h.itime, h.addition, h.what_done, emp.name | .
+      qq|SELECT h.employee_id, h.itime::timestamp(0) AS itime, h.addition, h.what_done, emp.name | .
       qq|FROM history_erp h | .
       qq|LEFT JOIN employee emp | .
-      qq|ON emp.id = st.employee_id | .
+      qq|ON emp.id = h.employee_id | .
       qq|WHERE trans_id = ? |
       . $restriction;