oscss-commit Mailing List for osCSS E-Commerce Shopping Cart (Page 63)

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Revision: 3769
          http://oscss.svn.sourceforge.net/oscss/?rev=3769&view=rev
Author:   oscim
Date:     2011-07-07 08:05:14 +0000 (Thu, 07 Jul 2011)

Log Message:
-----------
correction coquille html
correction erreur secu traitement des datas

Modified Paths:
--------------
    branches/2.1.0/catalog/ajax_exe.php
    branches/2.1.0/catalog/includes/content/shopping_cart.php
    branches/2.1.0/catalog/includes/modules/order_total/ot_shipping.php
    branches/2.1.0/catalog/includes/triggers/search_suggest.inc
    branches/2.1.0/catalog/install/data/templates/appareil_photo/electronix/includes/content/shopping_cart.php
    branches/2.1.0/catalog/install/includes/content/core.configuration.php

Modified: branches/2.1.0/catalog/ajax_exe.php
===================================================================

--- branches/2.1.0/catalog/ajax_exe.php	2011-07-06 07:51:31 UTC (rev 3768)
+++ branches/2.1.0/catalog/ajax_exe.php	2011-07-07 08:05:14 UTC (rev 3769)
@@ -21,7 +21,8 @@
     @brief code is part of execution call trigger by name $action
     @param $action string
   */
-    $file= $page->getPathTemplate(). DIR_WS_TRIGGERS . $action . '.inc';
+// echo    $file= $page->getPathTemplate(). DIR_WS_TRIGGERS . $action . '.inc';
+    $file= $page->fix_file(DIR_WS_TRIGGERS . $action . '.inc');
     if( ($r=page::TestFile($file)) && $r !=false ){
       require_once($file);
       exit;
@@ -31,6 +32,7 @@
     @brief code is part of execution call box
     @param $_GET['box'] string  le nom de la boxe
   */
+    if(!isset($_GET['box'])) exit;
       $page->post_init();
       $c=$page->oscss_boxes->_add($_GET['box'],'ajax','');
       $box_left=$page->oscss_boxes->_call($_GET['box'],'ajax');

Modified: branches/2.1.0/catalog/includes/content/shopping_cart.php
===================================================================
--- branches/2.1.0/catalog/includes/content/shopping_cart.php	2011-07-06 07:51:31 UTC (rev 3768)
+++ branches/2.1.0/catalog/includes/content/shopping_cart.php	2011-07-07 08:05:14 UTC (rev 3769)
@@ -8,7 +8,7 @@
  *\author oscim <mail aur...@os...> <www http://www.oscim.fr>
  *\encode UTF-8
  *\group content
- *\file 
+ *\file
  *\dir includes/content/
  *\brief cart custommers
 */
@@ -43,8 +43,8 @@
                 <ul>
                   <li class="cartName"><?php echo $product['name'] ;?></li>
                   <li class="cartQty"> <?php
-                  if(_cst_bool('AJAX_CART_MODE'))   echo MY_CART_QTY .' '. tep_draw_input_field('cart_quantity[]','cartQty'.$i, $product['quantity'], 'onkeyup="changecartqty('.$i.')"') . tep_draw_hidden_field('products_id[]', $product['id']) ;
-                  else  echo MY_CART_QTY .' '. tep_draw_input_field('cart_quantity[]','cartQty', $product['quantity']) . tep_draw_hidden_field('products_id[]', $product['id']) ;
+                  if(_cst_bool('AJAX_CART_MODE'))   echo MY_CART_QTY .' '. tep_draw_input_field('cart_quantity[]','cartQty'.$i, $product['quantity'], ' size="2"  onkeyup="changecartqty('.$i.')"') . tep_draw_hidden_field('products_id[]', $product['id']) ;
+                  else  echo MY_CART_QTY .' '. tep_draw_input_field('cart_quantity[]','cartQty', $product['quantity'], 'size="2" ') . tep_draw_hidden_field('products_id[]', $product['id']) ;
                   ?> </li>
 <!--                   <li id="ajaxcartPriceht<?php echo $i; ?>" class="cartPrice"> <?php //echo $currencies->display_price($product['final_price'], 1, $product['quantity']) ;?> </li> -->
                   <li id="ajaxcartPrice<?php echo $i; ?>" class="cartPrice"> <?php echo $currencies->format($product['total_line_ttc']) ?> </li>

Modified: branches/2.1.0/catalog/includes/modules/order_total/ot_shipping.php
===================================================================
--- branches/2.1.0/catalog/includes/modules/order_total/ot_shipping.php	2011-07-06 07:51:31 UTC (rev 3768)
+++ branches/2.1.0/catalog/includes/modules/order_total/ot_shipping.php	2011-07-07 08:05:14 UTC (rev 3769)
@@ -78,7 +78,7 @@
 
   function check() {
     if (!isset($this->_check)) {
-      $check_query = tep_db_query("select configuration_value from " . TABLE_CONFIGURATION . " where configuration_key = 'MODULE_ORDER_TOTAL_SHIPPING_STATUS'");
+      $check_query = tep_db_query("select configuration_value from " . TABLE_CONFIGURATION . " where configuration_key = 'MODULE_ORDER_TOTAL_SHIPPING_SORT_ORDER'");
       $this->_check = tep_db_num_rows($check_query);
     }
 

Modified: branches/2.1.0/catalog/includes/triggers/search_suggest.inc
===================================================================
--- branches/2.1.0/catalog/includes/triggers/search_suggest.inc	2011-07-06 07:51:31 UTC (rev 3768)
+++ branches/2.1.0/catalog/includes/triggers/search_suggest.inc	2011-07-07 08:05:14 UTC (rev 3769)
@@ -4,17 +4,20 @@
   @portion code Copyright (c) 2002 osCommerce
   @package osCSS-2 <www http://www.oscss.org>
   @version 2.1.0
-  @date  24/01/11, 19:24
+  @date  07/07/11, 09:03
   @author oscim <mail aur...@os...> <www http://www.oscim.fr>
   @encode UTF-8
   @brief code is part of execution search suggest
 */
-      if(!isset($_GET['search'])) exit;
-      else $sh=tep_db_input(utf8_encode(strtolower($_GET['search'])));
-      $sql = "SELECT pd.products_name, pd.products_id FROM " . TABLE_PRODUCTS . " p, ".TABLE_PRODUCTS_DESCRIPTION." pd ," . TABLE_PRODUCTS_TO_CATEGORIES . " p2c,  " . TABLE_CATEGORIES . "  c WHERE p.products_id = pd.products_id and p.products_status = '1' and pd.language_id = '" . (int)$languages_id . "' and ( pd.products_name like '%" . $sh . "%'  ) and p2c.products_id=p.products_id and c.categories_id=p2c.categories_id and c.categories_status='1' LIMIT 15";
-      $product_query = $DB->query($sql);
 
-      while($product_array = $product_query->fetchAssoc())
-        echo '<a href="'.tep_href_link(FILENAME_PRODUCT_INFO, 'products_id=' . $product_array['products_id']).'">'.$product_array['products_name'].'</a>'."\n";
 
+  if(!isset($_GET['search'])) exit;
+  else $sh=tep_db_prepare_input(utf8_encode(strtolower($_GET['search'])));
+
+    $sql = "SELECT DISTINCT pd.products_name, pd.products_id FROM " . TABLE_PRODUCTS . " p, ".TABLE_PRODUCTS_DESCRIPTION." pd ," . TABLE_PRODUCTS_TO_CATEGORIES . " p2c,  " . TABLE_CATEGORIES . "  c WHERE p.products_id = pd.products_id and p.products_status = '1' and pd.language_id = '" . (int)$languages_id . "' and ( pd.products_name like '%" . tep_db_input($sh) . "%'  ) and p2c.products_id=p.products_id and c.categories_id=p2c.categories_id and c.categories_status='1' LIMIT 15";
+  $product_query = $DB->query($sql);
+
+  while($product_array = $product_query->fetchAssoc())
+    echo '<a href="'.tep_href_link(FILENAME_PRODUCT_INFO, 'products_id=' . $product_array['products_id']).'">'.$product_array['products_name'].'</a>'."\n";
+
 ?>
\ No newline at end of file

Modified: branches/2.1.0/catalog/install/data/templates/appareil_photo/electronix/includes/content/shopping_cart.php
===================================================================
--- branches/2.1.0/catalog/install/data/templates/appareil_photo/electronix/includes/content/shopping_cart.php	2011-07-06 07:51:31 UTC (rev 3768)
+++ branches/2.1.0/catalog/install/data/templates/appareil_photo/electronix/includes/content/shopping_cart.php	2011-07-07 08:05:14 UTC (rev 3769)
@@ -58,7 +58,7 @@
 		</div>
 		<div class="shop_qte">
 		  <?php if(_cst_bool('AJAX_CART_MODE'))   echo  ' '. tep_draw_input_field('cart_quantity[]','cartQty'.$i, $product['quantity'], 'size="2" onkeyup="changecartqty('.$i.')"') . tep_draw_hidden_field('products_id[]', $product['id']) ;
-                  else  echo  ' '. tep_draw_input_field('cart_quantity[]','cartQty', $product['quantity']) . tep_draw_hidden_field('products_id[]', $product['id']) ;
+                  else  echo  ' '. tep_draw_input_field('cart_quantity[]','cartQty', $product['quantity'], 'size="2" ') . tep_draw_hidden_field('products_id[]', $product['id']) ;
                   ?>
 		</div>
 		<div class="shop_total_unitaire">
@@ -102,9 +102,7 @@
           <input class="submitBt navBt" type="submit" value="<?php echo IMAGE_BUTTON_UPDATE_CART; ?>"  />
 
           <?php
-            $back = sizeof($navigation->path)-2;
-            if (isset($navigation->path[$back])) echo '<a class="navBt" href="' . tep_href_link($navigation->path[$back]['page'], tep_array_to_string($navigation->path[$back]['get'], array('action')), $navigation->path[$back]['mode']) . '">' . IMAGE_BUTTON_CONTINUE_SHOPPING . '</a>';
-            else   echo '<a class="navBt" href="javascript:history.go(-1)">' . IMAGE_BUTTON_BACK . '</a>'; ?>
+             echo '<a class="navBt" href="javascript:history.go(-1)">' . IMAGE_BUTTON_BACK . '</a>'; ?>
           <?php echo '<a class="navBt" href="' . tep_href_link(FILENAME_CHECKOUT_SHIPPING, '', 'SSL') . '">' . IMAGE_BUTTON_CHECKOUT . '</a>'; ?>
         </div>
     <?php } else { ?>

Modified: branches/2.1.0/catalog/install/includes/content/core.configuration.php
===================================================================
--- branches/2.1.0/catalog/install/includes/content/core.configuration.php	2011-07-06 07:51:31 UTC (rev 3768)
+++ branches/2.1.0/catalog/install/includes/content/core.configuration.php	2011-07-07 08:05:14 UTC (rev 3769)
@@ -421,7 +421,7 @@
     '' . "\n" .
     '# DEB Sans rewrite, placer des fichier du même nom a la racine' . "\n" .
     '# DEB Retrocompatibiliter' . "\n" .
-    '	RewriteRule ^conditions.php$ content.php?_ID=conditions.php&%{QUERY_STRING}' . "\n" .
+    '	RewriteRule ^conditions.php$ content.php?content=3&%{QUERY_STRING}' . "\n" .
     '	RewriteRule ^contact.php$ content.php?_ID=contact.php&%{QUERY_STRING}' . "\n" .
     '	RewriteRule ^cookie_usage.php$ content.php?_ID=cookie_usage.php&%{QUERY_STRING}' . "\n" .
     '	RewriteRule ^info_shopping_cart.php$ content.php?_ID=info_shopping_cart.php&%{QUERY_STRING}' . "\n" .


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.




2011	Jan	Feb	Mar (4)	Apr (57)	May (31)	Jun (21)	Jul (11)	Aug (23)	Sep (22)	Oct (36)	Nov (62)	Dec (85)
2012	Jan (24)	Feb (24)	Mar (65)	Apr (232)	May (118)	Jun (22)	Jul (54)	Aug (57)	Sep (14)	Oct (27)	Nov (16)	Dec (19)
2013	Jan (16)	Feb (12)	Mar (3)	Apr (17)	May (2)	Jun (30)	Jul (33)	Aug (19)	Sep (35)	Oct (58)	Nov (27)	Dec (64)
2014	Jan (102)	Feb (80)	Mar (15)	Apr (4)	May (3)	Jun (3)	Jul (5)	Aug (11)	Sep (15)	Oct	Nov (3)	Dec (5)
2015	Jan (5)	Feb (4)	Mar (2)	Apr (11)	May	Jun	Jul	Aug	Sep	Oct (9)	Nov (10)	Dec
2016	Jan (3)	Feb (2)	Mar (18)	Apr (13)	May (2)	Jun	Jul	Aug	Sep (4)	Oct	Nov	Dec

oscss-commit Mailing List for osCSS E-Commerce Shopping Cart (Page 63)

E-Commerce Shopping Cart

oscss-commit — SVN Commit Notifications