10 replies to this topic

[om sa]

Hey all,

Finally I have managed to finish my first project with php & mysql, which I called Easy Invoice.

The project still in beta phase, and need some testing and enhancement to be ready to use.

Easy Invoice is a simple billing system that aims to help small companies and shops to track their sales invoices.

The system was developed using php & mysql, and needed nearly three weeks to be completed.

Project link at Source forge

And this is the demo site
User: demo & Pass: demo

Finally, here you can go through the code online


I can't wait to hear your thoughts and comments about it.


Regards.

[bbqroast]

Cool!
BTW If I put a ' in a invoice it gets slashed :(.

[om sa]

hey,
nice catch,
I think the problem caused by mysql_real_escape_string() function, which aims to prevent SQL Injection.
I'll look into it, and try to find a solution.

[Alexander]

You've (or he does have) magic quotes enabled, this will automatically escape form variables and cause mysql_real_escape_string to escape twice without knowing.

You should create your own escape function, i.e.

function myEscapeFunction($string) {

    if(get_magic_quotes_gpc() == true) {

        $string = stripslashes($string);

    }

    return mysql_real_escape_string($string);

}

Note that this "feature" will be removed in PHP 6 releases

[om sa]

Thanks Alexander,

By saying 'magic quotes enabled'? do you mean in PHP configuration ?

[Alexander]

Yes, you can read about it on the PHP manual:
PHP: Magic Quotes - Manual

It was a controversial feature to automatically escape for you when enabled on certain installations, although this causes double escaping as mysql_* functions are not aware of its existence. This is due to be removed later on although we have not gotten there yet.

[om sa]

Thanks Alexander,
I'll do,

[bbqroast]

:) Purchase a couple of cakes...
Please...
I need the $$$...

[om sa]

Well do :)

[wwarren]

looks good

if you don't fill in all the fields when adding an item, it says "INVLAID INPUT" instead of "INVALID INPUT".

[om sa]

thanks wwarren,

good catch, and it will be fixed. ^^