diff --git a/admin-dev/get-file-admin.php b/admin-dev/get-file-admin.php index b37f691e5..39fcd8a85 100644 --- a/admin-dev/get-file-admin.php +++ b/admin-dev/get-file-admin.php @@ -25,5 +25,5 @@ */ define('_PS_ADMIN_DIR_', getcwd()); -require(_PS_ADMIN_DIR_.'/config/config.inc.php'); +require(_PS_ADMIN_DIR_.'/../config/config.inc.php'); Controller::getController('GetFileController')->run(); \ No newline at end of file diff --git a/admin-dev/themes/default/template/controllers/access/helpers/form/form.tpl b/admin-dev/themes/default/template/controllers/access/helpers/form/form.tpl index ef97458aa..532b87e80 100644 --- a/admin-dev/themes/default/template/controllers/access/helpers/form/form.tpl +++ b/admin-dev/themes/default/template/controllers/access/helpers/form/form.tpl @@ -52,7 +52,7 @@ checked = enabled ? 'checked': ''; $(this).parent().parent().parent().find('.child-'+id_tab+' input[type=checkbox]').attr('checked', checked); $.ajax({ - url: "{$link->getAdminLink('AdminAccess')}", + url: "{$link->getAdminLink('AdminAccess')|addslashes}", cache: false, data : { ajaxMode : '1', @@ -85,7 +85,7 @@ perfect_access_js_gestion(this, perm, id_tab, tabsize, tabnumber, table); $.ajax({ - url: "{$link->getAdminLink('AdminAccess')}", + url: "{$link->getAdminLink('AdminAccess')|addslashes}", cache: false, data : { ajaxMode : '1', @@ -134,7 +134,7 @@ }); $.ajax({ - url: "{$link->getAdminLink('AdminAccess')}", + url: "{$link->getAdminLink('AdminAccess')|addslashes}", cache: false, data : { ajaxMode: '1', diff --git a/admin-dev/themes/default/template/controllers/employees/helpers/form/form.tpl b/admin-dev/themes/default/template/controllers/employees/helpers/form/form.tpl index 395e949d0..e9a05e5f1 100644 --- a/admin-dev/themes/default/template/controllers/employees/helpers/form/form.tpl +++ b/admin-dev/themes/default/template/controllers/employees/helpers/form/form.tpl @@ -60,7 +60,7 @@ ifSuperAdmin($(this)); $.ajax({ - url: "{$link->getAdminLink('AdminEmployees')}", + url: "{$link->getAdminLink('AdminEmployees')|addslashes}", cache: false, data : { ajax : '1', diff --git a/admin-dev/themes/default/template/controllers/information/helpers/view/view.tpl b/admin-dev/themes/default/template/controllers/information/helpers/view/view.tpl index 782c4b834..d11e4721c 100644 --- a/admin-dev/themes/default/template/controllers/information/helpers/view/view.tpl +++ b/admin-dev/themes/default/template/controllers/information/helpers/view/view.tpl @@ -32,7 +32,7 @@ { $.ajax({ type: 'GET', - url: '{$link->getAdminLink('AdminInformation')}', + url: '{$link->getAdminLink('AdminInformation')|addslashes}', data: { 'action': 'checkFiles', 'ajax': 1 diff --git a/admin-dev/themes/default/template/controllers/orders/form.tpl b/admin-dev/themes/default/template/controllers/orders/form.tpl index 280faff39..ca178d9a5 100755 --- a/admin-dev/themes/default/template/controllers/orders/form.tpl +++ b/admin-dev/themes/default/template/controllers/orders/form.tpl @@ -28,7 +28,7 @@ var changed_shipping_price = false; var shipping_price_selected_carrier = ''; var current_index = '{$current}&token={$token}'; - var admin_cart_link = '{$link->getAdminLink('AdminCarts')}'; + var admin_cart_link = '{$link->getAdminLink('AdminCarts')|escape:'html'}'; var cart_quantity = new Array(); var currencies = new Array(); var id_currency = ''; @@ -100,7 +100,7 @@ $('#show_old_carts').click(); $('#payment_module_name').change(); $.ajaxSetup({ type:"post" }); - $("#voucher").autocomplete('{$link->getAdminLink('AdminCartRules')}', { + $("#voucher").autocomplete('{$link->getAdminLink('AdminCartRules')|escape:'html'}', { minChars: 3, max: 15, width: 250, @@ -157,7 +157,7 @@ free_shipping = 1; $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: true, dataType: "json", data : { @@ -217,7 +217,7 @@ e.preventDefault(); $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: true, dataType: "json", data : { @@ -254,7 +254,7 @@ { $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: true, dataType: "json", data : { @@ -288,7 +288,7 @@ { $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: true, dataType: "json", data : { @@ -324,7 +324,7 @@ { $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: true, dataType: "json", data : { @@ -351,7 +351,7 @@ $('#id_cart').val(id_cart); $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: false, dataType: "json", data : { @@ -378,7 +378,7 @@ { $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: true, dataType: "json", data : { @@ -401,7 +401,7 @@ { $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: true, dataType: "json", data : { @@ -426,7 +426,7 @@ { $.ajax({ type:"POST", - url : "{$link->getAdminLink('AdminOrders')}", + url : "{$link->getAdminLink('AdminOrders')|escape:'html'}", async: true, dataType: "json", data : { @@ -468,7 +468,7 @@ $('#new_address').attr('href', address_link.replace(/id_customer=[0-9]+/, 'id_customer='+id_customer)); $.ajax({ type:"POST", - url : "{$link->getAdminLink('AdminCarts')}", + url : "{$link->getAdminLink('AdminCarts')|escape:'html'}", async: false, dataType: "json", data : { @@ -534,7 +534,7 @@ $('#products_part').show(); $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminOrders')}", + url: "{$link->getAdminLink('AdminOrders')|addslashes}", async: true, dataType: "json", data : { @@ -766,7 +766,7 @@ { $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: true, dataType: "json", data : { @@ -822,7 +822,7 @@ { $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: true, dataType: "json", data : { @@ -845,7 +845,7 @@ { $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: true, dataType: "json", data : { @@ -868,7 +868,7 @@ { $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: true, dataType: "json", data : { @@ -899,7 +899,7 @@ { $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminOrders')}", + url: "{$link->getAdminLink('AdminOrders')|addslashes}", async: true, dataType: "json", data : { @@ -957,7 +957,7 @@ { $.ajax({ type:"POST", - url: "{$link->getAdminLink('AdminCarts')}", + url: "{$link->getAdminLink('AdminCarts')|addslashes}", async: true, dataType: "json", data : { diff --git a/admin-dev/themes/default/template/controllers/orders/helpers/view/view.tpl b/admin-dev/themes/default/template/controllers/orders/helpers/view/view.tpl index 01e70bc85..9fc61567f 100755 --- a/admin-dev/themes/default/template/controllers/orders/helpers/view/view.tpl +++ b/admin-dev/themes/default/template/controllers/orders/helpers/view/view.tpl @@ -27,7 +27,7 @@ {block name="override_tpl"} diff --git a/modules/blockpermanentlinks/blockpermanentlinks.tpl b/modules/blockpermanentlinks/blockpermanentlinks.tpl index 09d2ddb9a..7e0766f66 100644 --- a/modules/blockpermanentlinks/blockpermanentlinks.tpl +++ b/modules/blockpermanentlinks/blockpermanentlinks.tpl @@ -27,11 +27,11 @@