Bug 1953 [2/3]: refactoring SQL in C4::Items::GetItemsForInventory to use placeholders
authorAndrew Moore <andrew.moore@liblime.com>
Fri, 25 Jul 2008 16:55:12 +0000 (11:55 -0500)
committerJoshua Ferraro <jmf@liblime.com>
Sun, 27 Jul 2008 11:10:53 +0000 (06:10 -0500)
commit22d9133268b90ceabffa51fca072fd2828de9e25
treeca17a1f16e49dc78edbc2322382f8d1e60c0f114
parent362e1025c9c59b482c0c61fa519f539ec0a955f4
Bug 1953 [2/3]: refactoring SQL in C4::Items::GetItemsForInventory to use placeholders

The SQL in C4::Items::GetItemsForInventory wasn't using placeholders and
bind parameters, possibly leaving itself open ot SQL injection attacks. This
patch changes that.
I've also incliuded a test module for C4::items::GetItemsForInventory.

Signed-off-by: Joshua Ferraro <jmf@liblime.com>
C4/Items.pm
t/lib/KohaTest/Items/GetItemsForInventory.pm [new file with mode: 0644]