From d7845fa430e017bee5718c1784c6d00c5e857fa0 Mon Sep 17 00:00:00 2001
From: "ismael.moreno" <ismael.moreno@artica.es>
Date: Thu, 1 Oct 2020 18:56:16 +0200
Subject: [PATCH 1/2] SQL query do not need to be cleaned

---
 pandora_console/include/functions_reporting.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pandora_console/include/functions_reporting.php b/pandora_console/include/functions_reporting.php
index a27be4f530..6aac5a04df 100755
--- a/pandora_console/include/functions_reporting.php
+++ b/pandora_console/include/functions_reporting.php
@@ -5301,7 +5301,7 @@ function reporting_sql($report, $content)
             )
         );
     } else {
-        $sql = io_safe_output($content['external_source']);
+        $sql = $content['external_source'];
     }
 
     // Check if exist sql macro

From 5978e46141ec3399a2689179fb044bd4f9863a95 Mon Sep 17 00:00:00 2001
From: marcos <marcos.alconada@artica.es>
Date: Mon, 23 Nov 2020 13:29:35 +0100
Subject: [PATCH 2/2] add toolkit on sql query report item editor

---
 .../godmode/reporting/reporting_builder.item_editor.php  | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/pandora_console/godmode/reporting/reporting_builder.item_editor.php b/pandora_console/godmode/reporting/reporting_builder.item_editor.php
index 7762f7b752..6c889c36d7 100755
--- a/pandora_console/godmode/reporting/reporting_builder.item_editor.php
+++ b/pandora_console/godmode/reporting/reporting_builder.item_editor.php
@@ -1896,7 +1896,14 @@ $class = 'databox filters';
         </tr>
 
         <tr id="row_query" style="" class="datos">
-            <td style="font-weight:bold;"><?php echo __('SQL query'); ?></td>
+            <td style="font-weight:bold;">
+            <?php
+            echo __('SQL query').ui_print_help_tip(
+                __('The entities of the fields that contain them must be included.'),
+                true
+            );
+            ?>
+                </td>
             <td style="" id="sql_entry">
                 <?php
                 html_print_textarea('sql', 5, 25, $sql_query_report);