22d9133268
The SQL in C4::Items::GetItemsForInventory wasn't using placeholders and bind parameters, possibly leaving itself open ot SQL injection attacks. This patch changes that. I've also incliuded a test module for C4::items::GetItemsForInventory. Signed-off-by: Joshua Ferraro <jmf@liblime.com> |
||
---|---|---|
.. | ||
KohaTest | ||
KohaTest.pm |