From 6f40a4f45860eb4947b9eb7975e966ec60d3faaf Mon Sep 17 00:00:00 2001
From: johnnyq <johnny@pittpc.com>
Date: Tue, 22 Feb 2022 02:33:26 -0500
Subject: [PATCH] Fixed Products listing broken due to unused funtion
 get_currency

---
 product_add_modal.php | 2 +-
 products.php          | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/product_add_modal.php b/product_add_modal.php
index 190ded19..37179dbf 100644
--- a/product_add_modal.php
+++ b/product_add_modal.php
@@ -48,7 +48,7 @@
           
           <div class="form-group">
             <label>Price <strong class="text-danger">*</strong></label>
-            <input type="number" step="0.01" min="0" class="form-control" name="price" placeholder="Price (<?php echo get_currency_symbol($session_company_currency); ?>)" required>
+            <input type="number" step="0.01" min="0" class="form-control" name="price" placeholder="Price" required>
           </div>
 
           <div class="form-group">
diff --git a/products.php b/products.php
index bd297cc9..91f1c0e1 100644
--- a/products.php
+++ b/products.php
@@ -86,8 +86,8 @@ $num_rows = mysqli_fetch_row(mysqli_query($mysqli,"SELECT FOUND_ROWS()"));
       
           while($row = mysqli_fetch_array($sql)){
             $product_id = $row['product_id'];
-            $product_name = $row['product_name'];
-            $product_description = $row['product_description'];
+            $product_name = htmlentities($row['product_name']);
+            $product_description = htmlentities($row['product_description']);
             if(empty($product_description)){
               $product_description_display = "-";
             }else{