CalvinBackup/erpnext
1
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-02-16 11:13:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: use query builder instead of raw SQL in get_blanket_orders

Browse Source 
(cherry picked from commit 1db135262d)
This commit is contained in:
diptanilsaha
2025-08-15 22:56:45 +05:30
committed by Mergify
parent 1c24bedaf6
commit 9d06e093a6
1 changed files with 18 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
erpnext/controllers/queries.py
View File

@@ -528,21 +528,27 @@ def get_account_list(doctype, txt, searchfield, start, page_len, filters):
@frappe.whitelist() @frappe.whitelist()
@frappe.validate_and_sanitize_search_inputs @frappe.validate_and_sanitize_search_inputs
def get_blanket_orders(doctype, txt, searchfield, start, page_len, filters): def get_blanket_orders(doctype, txt, searchfield, start, page_len, filters):
return frappe.db.sql( bo = frappe.qb.DocType("Blanket Order")
"""select distinct bo.name, bo.blanket_order_type, bo.to_date bo_item = frappe.qb.DocType("Blanket Order Item")
from `tabBlanket Order` bo, `tabBlanket Order Item` boi
where blanket_orders = (
boi.parent = bo.name frappe.qb.from_(bo)
and boi.item_code = {item_code} .from_(bo_item)
and bo.blanket_order_type = '{blanket_order_type}' .select(bo.name)
and bo.company = {company} .distinct()
and bo.docstatus = 1""".format( .select(bo.blanket_order_type, bo.to_date)
item_code=frappe.db.escape(filters.get("item")), .where(
blanket_order_type=filters.get("blanket_order_type"), (bo_item.parent == bo.name)
company=frappe.db.escape(filters.get("company")), & (bo_item.item_code == filters.get("item"))
& (bo.blanket_order_type == filters.get("blanket_order_type"))
& (bo.company == filters.get("company"))
& (bo.docstatus == 1)
) )
.run()
) )
return blanket_orders
@frappe.whitelist() @frappe.whitelist()
@frappe.validate_and_sanitize_search_inputs @frappe.validate_and_sanitize_search_inputs