Changeset 21636 for branches

Timestamp:

2012/03/13 01:20:55 (12 years ago)

Author:

Seasoft

Message:

#1697 (LC_Page_Mypage_History au用のセッションキーの受け渡し方法が不適切)
#1613 (typo修正・ソース整形・ソースコメントの改善)

• HTML エスケープ漏れ

Location:

branches/version-2_12-dev/data

Files:

• Smarty/templates/mobile/mypage/history.tpl (modified) (1 diff)
• class/pages/mypage/LC_Page_Mypage_History.php (modified) (1 diff)

branches/version-2_12-dev/data/Smarty/templates/mobile/mypage/history.tpl

@@ -49 +49 @@
             <!--{if $orderDetail.is_downloadable}-->
                 <!--{if $isAU == false}-->
-                    <a target="_self" href="<!--{$smarty.const.ROOT_URLPATH}-->mypage/download.php?order_id=<!--{$tpl_arrOrderData.order_id}-->&product_id=<!--{$orderDetail.product_id}-->&product_class_id=<!--{$orderDetail.product_class_id}-->">ダウンロード</a><br>
+                    <a target="_self" href="<!--{$smarty.const.ROOT_URLPATH}-->mypage/download.php?order_id=<!--{$tpl_arrOrderData.order_id}-->&amp;product_id=<!--{$orderDetail.product_id}-->&amp;product_class_id=<!--{$orderDetail.product_class_id}-->">ダウンロード</a><br>
                 <!--{else}-->
-                    <object data="<!--{$smarty.const.ROOT_URLPATH}-->mypage/download.php?order_id=<!--{$tpl_arrOrderData.order_id}-->&product_id=<!--{$orderDetail.product_id}-->&product_class_id=<!--{$orderDetail.product_class_id}-->&PHPSESSID=<!--{$phpsessid}-->" copyright="no" standby="ダウンロード" type="<!--{$orderDetail.mime_type}-->">
+                    <object data="<!--{$smarty.const.ROOT_URLPATH}-->mypage/download.php?order_id=<!--{$tpl_arrOrderData.order_id}-->&amp;product_id=<!--{$orderDetail.product_id}-->&amp;product_class_id=<!--{$orderDetail.product_class_id}-->&amp;<!--{$smarty.const.SID}-->" copyright="no" standby="ダウンロード" type="<!--{$orderDetail.mime_type}-->">
                         <param name="title" value="<!--{$orderDetail.down_filename}-->" valuetype="data">
                     </object><br>

branches/version-2_12-dev/data/class/pages/mypage/LC_Page_Mypage_History.php

@@ -208 +208 @@
             // MIMETYPE、ファイル名のセット
             $this->tpl_arrOrderDetail = $this->lfSetMimetype($arrOrderDetails);
+
+            // @deprecated 2.12.0 PHP 定数 SID を使うこと
             $this->phpsessid = $_GET['PHPSESSID'];
+
             $this->isAU = true;
         }