dinislage/PrestaShop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[-] FO: Fix #PSCFV-5061

Browse Source 
git-svn-id: http://dev.prestashop.com/svn/v1/branches/1.5.x@17924 b9a71923-0436-4b27-9f14-aed3839534dd
This commit is contained in:
rGaillard
2012-10-23 13:04:27 +00:00
parent 6fdeccc531
commit 1189a53427
3 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin-dev/themes/default/template/controllers/customer_threads/message.tpl
+1 -1
View File
@@ -152,7 +152,7 @@
</dl>
<dl>
<dt>{l s='Message:'}</dt>
<dd>{$message.message|nl2br}</dd>
<dd>{$message.message|escape:'htmlall':'UTF-8'|nl2br}</dd>
</dl>
</div>
controllers/front/OrderDetailController.php
+5 -4
View File
@@ -51,13 +51,13 @@ class OrderDetailControllerCore extends FrontController
if (Tools::isSubmit('submitMessage'))
{
$idOrder = (int)(Tools::getValue('id_order'));
$msgText = htmlentities(Tools::getValue('msgText'), ENT_COMPAT, 'UTF-8');
$msgText = Tools::getValue('msgText');
if (!$idOrder || !Validate::isUnsignedId($idOrder))
$this->errors[] = Tools::displayError('Order is no longer valid');
else if (empty($msgText))
elseif (empty($msgText))
$this->errors[] = Tools::displayError('Message cannot be blank');
else if (!Validate::isMessage($msgText))
elseif (!Validate::isMessage($msgText))
$this->errors[] = Tools::displayError('Message is invalid (HTML is not allowed)');
if (!count($this->errors))
{
@@ -86,7 +86,7 @@ class OrderDetailControllerCore extends FrontController
else
$ct = new CustomerThread((int)$id_customer_thread);
$cm->id_customer_thread = $ct->id;
$cm->message = Tools::htmlentitiesutf8($msgText);
$cm->message = $msgText;
$cm->ip_address = ip2long($_SERVER['REMOTE_ADDR']);
$cm->add();
@@ -196,6 +196,7 @@ class OrderDetailControllerCore extends FrontController
'customizedDatas' => $customizedDatas
/* DEPRECATED: customizedDatas @since 1.5 */
));
if ($carrier->url && $order->shipping_number)
$this->context->smarty->assign('followup', str_replace('@', $order->shipping_number, $carrier->url));
$this->context->smarty->assign('HOOK_ORDERDETAILDISPLAYED', Hook::exec('displayOrderDetail', array('order' => $order)));
themes/default/order-detail.tpl
+1 -1
View File
@@ -381,7 +381,7 @@
<br />
{dateFormat date=$message.date_add full=1}
</td>
<td>{$message.message|nl2br}</td>
<td>{$message.message|escape:'htmlall':'UTF-8'|nl2br}</td>
</tr>
{/foreach}
</tbody>