fix: sle query

agritheory · May 23, 2023 · ea7f3c4 · ea7f3c4
1 parent 32a8cfa
commit ea7f3c4
Show file tree

Hide file tree

Showing 2 changed files with 397 additions and 396 deletions.
diff --git a/beam/beam/doctype/handling_unit/__init__.py b/beam/beam/doctype/handling_unit/__init__.py
@@ -1,25 +1,26 @@
-import frappe
-import json
-import datetime
-
-
-@frappe.whitelist()
-def handling_unit_query(doctype, txt, searchfield, start=0, page_len=20, filters=None):
-	filters = frappe._dict({}) if not filters else filters
-	return frappe.db.sql(
-		"""
-		SELECT
-			`tabStock Ledger Entry`.handling_unit
-		FROM `tabStock Ledger Entry`
-		WHERE `tabStock Ledger Entry`.item_code = %(item_code)s
-		AND `tabStock Ledger Entry`.warehouse = %(warehouse)s
-		ORDER BY `tabStock Ledger Entry`.modified DESC
-		LIMIT %(page_len)s, %(start)s
-	""",
-		{
-			"item_code": filters.get("item_code"),
-			"warehouse": filters.get("warehouse"),
-			"start": start,
-			"page_len": page_len,
-		},
-	)
+import frappe
+import json
+import datetime
+
+
+@frappe.whitelist()
+@frappe.validate_and_sanitize_search_inputs
+def handling_unit_query(doctype, txt, searchfield, start=0, page_len=20, filters=None):
+	filters = frappe._dict({}) if not filters else filters
+	return frappe.db.sql(
+		"""
+		SELECT
+			`tabStock Ledger Entry`.handling_unit
+		FROM `tabStock Ledger Entry`
+		WHERE `tabStock Ledger Entry`.item_code = %(item_code)s
+		AND `tabStock Ledger Entry`.warehouse = %(warehouse)s
+		ORDER BY `tabStock Ledger Entry`.modified DESC
+		LIMIT %(page_len)s, %(start)s
+	""",
+		{
+			"item_code": filters.get("item_code"),
+			"warehouse": filters.get("warehouse"),
+			"start": start,
+			"page_len": page_len,
+		},
+	)