bugfix prepardstatement used before creating

git-svn-id: http://15.206.35.175/svn/proteus/business-java/trunk@91525 ce508802-f39f-4f6c-b175-0d175dae99d5

webitm-dis/ibase/webitm/ejb/dis/StockUpdate.java

@@ -710,11 +710,15 @@ public class StockUpdate
                     pstmt.close();
                     
                     sql= "select (case when iss_criteria is null then 'I' else iss_criteria end) "
-							+" from item where item_code = '"+this.itemCode+"'" ;
+							+" from item where item_code = ? "; //'"+this.itemCode+"'" ;
+					pstmt = conn.prepareStatement(sql);
+					pstmt.setString(1,this.itemCode);
 					rs = pstmt.executeQuery();
 					if(rs.next()){
 						issCriteria=rs.getString(1);
 					}
+                    rs.close();
+                    pstmt.close();
 					if (this.noArt==0)
 					{
 						this.noArt = 1;