diff --git a/client_statement.php b/client_statement.php index c51ac7ed..d1c76e5b 100644 --- a/client_statement.php +++ b/client_statement.php @@ -22,10 +22,10 @@ if (isset($_GET['client_id'])) { $result_client_details = mysqli_query($mysqli, $sql_client_details); $row_client_details = mysqli_fetch_assoc($result_client_details); - $client_name = $row_client_details['client_name']; - $client_type = $row_client_details['client_type']; - $client_website = $row_client_details['client_website']; - $client_net_terms = $row_client_details['client_net_terms']; + $client_name = nullable_html_entities($row_client_details['client_name']); + $client_type = nullable_html_entities($row_client_details['client_type']); + $client_website = nullable_html_entities($row_client_details['client_website']); + $client_net_terms = intval($row_client_details['client_net_terms']); $sql_client_unpaid_invoices = " SELECT @@ -82,16 +82,16 @@ if (isset($_GET['client_id'])) { @@ -151,10 +151,10 @@ if (isset($_GET['client_id'])) { $result_client_payments = mysqli_query($mysqli, $sql_client_payments); while ($row = mysqli_fetch_assoc($result_client_payments)) { - $payment_date = $row['payment_date']; - $payment_amount = $row['payment_amount']; - $payment_reference = $row['payment_reference']; - $invoice_number = $row['invoice_prefix'].$row['invoice_number']; + $payment_date = nullable_html_entities($row['payment_date']); + $payment_amount = floatval($row['payment_amount']); + $payment_reference = nullable_html_entities($row['payment_reference']); + $invoice_number = nullable_html_entities($row['invoice_prefix'].$row['invoice_number']); $payment_amount_formatted = numfmt_format_currency($currency_format, $payment_amount, $currency_code); ?>