[Koha-cvs] CVS: koha/C4 Acquisitions.pm,1.5.2.2,1.5.2.3

[Alan Millar]

Update of /cvsroot/koha/koha/C4
In directory usw-pr-cvs1:/tmp/cvs-serv24415

Modified Files:
      Tag: rel-1-2
	Acquisitions.pm 
Log Message:
DBI bound parameters


Index: Acquisitions.pm
===================================================================
RCS file: /cvsroot/koha/koha/C4/Acquisitions.pm,v
retrieving revision 1.5.2.2
retrieving revision 1.5.2.3
diff -C2 -r1.5.2.2 -r1.5.2.3
*** Acquisitions.pm	18 May 2002 10:21:51 -0000	1.5.2.2
--- Acquisitions.pm	28 May 2002 20:43:14 -0000	1.5.2.3
***************
*** 58,65 ****
    my ($bi,$bib)=@_;
    my $dbh=C4Connect;
!   my $query="Select ordernumber from aqorders where biblionumber=$bib and
!   biblioitemnumber='$bi'";
    my $sth=$dbh->prepare($query);
!   $sth->execute;
    my $ordnum=$sth->fetchrow_hashref;
    $sth->finish;
--- 58,66 ----
    my ($bi,$bib)=@_;
    my $dbh=C4Connect;
!   my $query="Select ordernumber 
! 	from aqorders 
! 	where biblionumber=? and biblioitemnumber=?";
    my $sth=$dbh->prepare($query);
!   $sth->execute($bib,$bi);
    my $ordnum=$sth->fetchrow_hashref;
    $sth->finish;
***************
*** 74,83 ****
    my $dbh=C4Connect;
    my $query="Select * from biblio,biblioitems,aqorders,aqorderbreakdown 
!   where aqorders.ordernumber='$ordnum' 
    and biblio.biblionumber=aqorders.biblionumber and
    biblioitems.biblioitemnumber=aqorders.biblioitemnumber and
    aqorders.ordernumber=aqorderbreakdown.ordernumber";
    my $sth=$dbh->prepare($query);
!   $sth->execute;
    my $data=$sth->fetchrow_hashref;
    $sth->finish;
--- 75,84 ----
    my $dbh=C4Connect;
    my $query="Select * from biblio,biblioitems,aqorders,aqorderbreakdown 
!   where aqorders.ordernumber=?
    and biblio.biblionumber=aqorders.biblionumber and
    biblioitems.biblioitemnumber=aqorders.biblioitemnumber and
    aqorders.ordernumber=aqorderbreakdown.ordernumber";
    my $sth=$dbh->prepare($query);
!   $sth->execute($ordnum);
    my $data=$sth->fetchrow_hashref;
    $sth->finish;
***************
*** 353,378 ****
    my $data   = $sth->fetchrow_arrayref;
    my $bibnum = $$data[0] + 1;
!   my $series = 0;
  
!   $biblio->{'title'}       = $dbh->quote($biblio->{'title'});
!   $biblio->{'author'}      = $dbh->quote($biblio->{'author'});
!   $biblio->{'copyright'}   = $dbh->quote($biblio->{'copyright'});
!   $biblio->{'seriestitle'} = $dbh->quote($biblio->{'seriestitle'});
!   $biblio->{'notes'}	   = $dbh->quote($biblio->{'notes'});
!   if ($biblio->{'seriestitle'}) { $series = 1 };
  
    $sth->finish;
    $query = "insert into biblio set
! biblionumber  = $bibnum,
! title         = $biblio->{'title'},
! author        = $biblio->{'author'},
! copyrightdate = $biblio->{'copyright'},
! series        = $series;
! seriestitle   = $biblio->{'seriestitle'},
! notes         = $biblio->{'notes'}";
  
-   $sth = $dbh->prepare($query);
  #  print $query;
!   $sth->execute;
  
    $sth->finish;
--- 354,382 ----
    my $data   = $sth->fetchrow_arrayref;
    my $bibnum = $$data[0] + 1;
!   my $series;
  
!   if ($biblio->{'seriestitle'}) { $series = 1 } else { $series = 0 };
  
    $sth->finish;
    $query = "insert into biblio set
! 	biblionumber  = ?,
! 	title         = ?,
! 	author        = ?,
! 	copyrightdate = ?,
! 	series        = ?,
! 	seriestitle   = ?,
! 	notes         = ?   ";
  
  #  print $query;
!   $sth = $dbh->prepare($query);
!   $sth->execute(
!     $bibnum,
!     $biblio->{'title'},
!     $biblio->{'author'},
!     $biblio->{'copyright'},
!     $series,
!     $biblio->{'seriestitle'} ,
!     $biblio->{'notes'}	   
!   ) ;
  
    $sth->finish;