mirror of
https://github.com/frappe/erpnext.git
synced 2026-05-24 07:29:22 +00:00
parameterises sql string
This commit is contained in:
@@ -29,7 +29,7 @@ def get_supplier():
|
|||||||
def check_supplier_has_docname_access(supplier):
|
def check_supplier_has_docname_access(supplier):
|
||||||
status = True
|
status = True
|
||||||
if frappe.form_dict.name not in frappe.db.sql_list("""select parent from `tabRequest for Quotation Supplier`
|
if frappe.form_dict.name not in frappe.db.sql_list("""select parent from `tabRequest for Quotation Supplier`
|
||||||
where supplier = '{supplier}'""".format(supplier=supplier)):
|
where supplier = %s""", (supplier,)):
|
||||||
status = False
|
status = False
|
||||||
return status
|
return status
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user