From 21fb824367c56d59fdba96061ce4ebc898a61129 Mon Sep 17 00:00:00 2001 From: fBrignoli Date: Wed, 9 May 2012 08:41:26 +0000 Subject: [PATCH] [-] FO : Invalid voucher name --- classes/CartRule.php | 2 +- controllers/front/ParentOrderController.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/classes/CartRule.php b/classes/CartRule.php index 0e0fc3fd5..2a3fb7a2a 100644 --- a/classes/CartRule.php +++ b/classes/CartRule.php @@ -184,7 +184,7 @@ class CartRuleCore extends ObjectModel */ public static function getIdByCode($code) { - if (!Validate::isDiscountName($code)) + if (!Validate::isCleanHtml($code)) return false; return Db::getInstance(_PS_USE_SQL_SLAVE_)->getValue('SELECT `id_cart_rule` FROM `'._DB_PREFIX_.'cart_rule` WHERE `code` = \''.pSQL($code).'\''); } diff --git a/controllers/front/ParentOrderController.php b/controllers/front/ParentOrderController.php index 3decb5f49..1002aac7c 100644 --- a/controllers/front/ParentOrderController.php +++ b/controllers/front/ParentOrderController.php @@ -94,7 +94,7 @@ class ParentOrderControllerCore extends FrontController { if (!($code = trim(Tools::getValue('discount_name')))) $this->errors[] = Tools::displayError('You must enter a voucher code'); - elseif (!Validate::isDiscountName($code)) + elseif (!Validate::isCleanHtml($code)) $this->errors[] = Tools::displayError('Voucher code invalid'); else {