sunsetsystems/openemr — comment on commit f2210e30ff599eff46b68741f89b1f85a178f290
File: interface/forms/fee_sheet/new.php line 456
By bradymiller:

Since this is an isolated call to a new function parameter, would make more sense to escape it within the addBilling function in library/billing.inc via binding (only bind that parameter in the query). Then don't need to "untangle" as much when convert this script to the new security model.