commit e3ea8063905a6c188bee036253b788665551770d
author deepeshgarg007 <deepeshgarg6@gmail.com> Mon Apr 22 21:08:29 2019 +0530
committer deepeshgarg007 <deepeshgarg6@gmail.com> Mon Apr 22 21:08:29 2019 +0530
tree 22ab33b5f5e781d19282628b9ebe88726821c907
parent d5e7bf8f0f33e076376035c4b74a46da48d80f49

fix: Ignore sql injections

erpnext/stock/report/inactive_items/inactive_items.py

diff --git a/erpnext/stock/report/inactive_items/inactive_items.py b/erpnext/stock/report/inactive_items/inactive_items.py
index 188f59b..8d87912 100644
--- a/erpnext/stock/report/inactive_items/inactive_items.py
+++ b/erpnext/stock/report/inactive_items/inactive_items.py
@@ -117,7 +117,7 @@
 		DATEDIFF(CURDATE(), {date_field}) as days_since_last_order
 		from `tab{doctype}` s, `tab{doctype} Item` si
 		where s.name = si.parent and s.docstatus = 1
-		group by si.name order by days_since_last_order """
+		group by si.name order by days_since_last_order """ #nosec
 		.format(date_field = date_field, doctype = filters['based_on']), as_dict=1)
 
 	for d in sales_data: