Changeset 22861


Ignore:
Timestamp:
2013/06/19 16:50:22 (4 years ago)
Author:
m_uehara
Message:

#2264 おすすめ商品検索エスケープ漏れ対応

Location:
branches/version-2_12-dev/data
Files:
2 edited

Legend:

Unmodified
Added
Removed
  • branches/version-2_12-dev/data/Smarty/templates/admin/contents/recommend_search.tpl

    r22796 r22861  
    3030 
    3131function func_submit( id ){ 
    32     var fm = window.opener.document.form<!--{$smarty.get.rank}-->; 
     32    var fm = window.opener.document.form<!--{$rank|h}-->; 
    3333    fm.product_id.value = id; 
    3434    fm.mode.value = 'set_item'; 
    35     fm.rank.value = '<!--{$smarty.get.rank}-->'; 
     35    fm.rank.value = '<!--{$rank|h}-->'; 
    3636    fm.submit(); 
    3737    window.close(); 
  • branches/version-2_12-dev/data/class/pages/admin/contents/LC_Page_Admin_Contents_RecommendSearch.php

    r22796 r22861  
    7272        $objFormParam->setParam($_POST); 
    7373        $objFormParam->convParam(); 
     74 
     75        $rank = intval($_GET['rank']); 
    7476 
    7577        switch ($this->getMode()) { 
     
    104106        // カテゴリ取得 
    105107        $this->arrCatList = $objDb->sfGetCategoryList(); 
     108        $this->rank       = $rank; 
    106109        $this->setTemplate('contents/recommend_search.tpl'); 
    107110 
Note: See TracChangeset for help on using the changeset viewer.