contactlist in the screen "profile" in the ecommerce screen
Locked
contactlist in the screen "profile" in the ecommerce screen
 
|
Re: contactlist in the screen "profile" in the ecommerce screen
Administrator
|
Re: contactlist in the screen "profile" in the ecommerce screen
|
|
Re: contactlist in the screen "profile" in the ecommerce screen
|
|
Re: contactlist in the screen "profile" in the ecommerce screen
|
|
Re: contactlist in the screen "profile" in the ecommerce screen
|
|
Re: contactlist in the screen "profile" in the ecommerce screen
|
|
The approach most often taken so far has been to use a link with
javascript attached to submit the form. Regards Scott HotWax Media http://www.hotwaxmedia.com On 8/01/2010, at 8:15 AM, Ruth Hoffman wrote: > Correct. Depending on the browser, you can style the submit button > to look like a link - if you want. What I've done is style my links > to look like buttons. > ---------------------------------------------------- > Find me on the web at http://www.myofbiz.com or Google keyword > "myofbiz" > [hidden email] > Info Olagos wrote: >> ok thanks Ruth, >> >> I will try to fix it myself. >> Then i suppose i have to use a button instead of a link to click on? >> >> Heidi >> >> 2010/1/7 Ruth Hoffman <[hidden email]> >> >> >>> Hi Heidi: >>> The problem is that several of the existing OFBiz service calls >>> such as >>> this have not been upgraded to the required (when calling from a >>> secured >>> location) new method of invocation - as a form. You may either >>> wait for >>> someone to fix it for you or change the service call to be invoked >>> as part >>> of a form instead of as a URL. >>> >>> Hope this helps. >>> Regards, >>> Ruth >>> ---------------------------------------------------- >>> Find me on the web at http://www.myofbiz.com or Google keyword >>> "myofbiz" >>> [hidden email] >>> >>> >>> Info Olagos wrote: >>> >>> >>>> This is done now. >>>> >>>> Regards, >>>> Heidi >>>> >>>> 2010/1/7 Jacques Le Roux <[hidden email]> >>>> >>>> >>>> >>>> >>>>> First thing to do is helping us to help you, please follow the >>>>> recommendation >>>>> >>>>> Thanks >>>>> >>>>> Jacques >>>>> >>>>> From: "Info Olagos" <[hidden email]> >>>>> >>>>> Hello, >>>>> >>>>> >>>>> >>>>>> When i try to unsubscribe from a contactlist in the screen >>>>>> "profile" in >>>>>> the >>>>>> ecommerce screen, i get the following error: >>>>>> >>>>>> >>>>>> Error calling event: >>>>>> org.ofbiz.webapp.event.EventHandlerException: Found >>>>>> URL >>>>>> parameter [contactListId] passed to secure (https) request-map >>>>>> with uri >>>>>> [updateContactListParty] with an event that calls service >>>>>> [updateContactListParty]; this is not allowed for security >>>>>> reasons! The >>>>>> data >>>>>> should be encrypted by making it part of the request body (a >>>>>> form field) >>>>>> instead of the request URL. >>>>>> >>>>>> Moreover it would be kind if you could create a Jira sub-task of >>>>>> https://issues.apache.org/jira/browse/OFBIZ-2330 >>>>>> (check before if a sub-task for this error does not exist). >>>>>> If you are not sure how to create a Jira issue please have a >>>>>> look before >>>>>> at >>>>>> http://docs.ofbiz.org/x/r. >>>>>> >>>>>> Thank you in advance for your help. >>>>>> >>>>>> >>>>>> >>>>>> Can anyone help me with a solution? >>>>>> >>>>>> >>>>>> >>>>>> Thanks, >>>>>> >>>>>> Heidi >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>> >> >> |
smime.p7s (4K)
Re: contactlist in the screen "profile" in the ecommerce screen
|
|
Re: contactlist in the screen "profile" in the ecommerce screen
|
|
I would be reluctant to hire someone to work on my webstore if they
didn't know javascript. I may be wrong but I think forms with no parameters can still be treated as straight up links without the security issue. I agree with your last point however, the front-end should be capable of operating with javascript disabled and for that reason a submit button may be better. Regards Scott On 8/01/2010, at 9:54 AM, Ruth Hoffman wrote: > Hi Scott: > That requires that a person know Javascript. And with really simple > forms - say forms with no parameters, why introduce the Javascript > overhead? > > BTW, there are still people out there that disable Javascript, if > you can believe that. > Regards, > Ruth > > Scott Gray wrote: >> The approach most often taken so far has been to use a link with >> javascript attached to submit the form. >> >> Regards >> Scott >> >> HotWax Media >> http://www.hotwaxmedia.com >> >> On 8/01/2010, at 8:15 AM, Ruth Hoffman wrote: >> >>> Correct. Depending on the browser, you can style the submit button >>> to look like a link - if you want. What I've done is style my >>> links to look like buttons. >>> ---------------------------------------------------- >>> Find me on the web at http://www.myofbiz.com or Google keyword >>> "myofbiz" >>> [hidden email] >>> Info Olagos wrote: >>>> ok thanks Ruth, >>>> >>>> I will try to fix it myself. >>>> Then i suppose i have to use a button instead of a link to click >>>> on? >>>> >>>> Heidi >>>> >>>> 2010/1/7 Ruth Hoffman <[hidden email]> >>>> >>>> >>>>> Hi Heidi: >>>>> The problem is that several of the existing OFBiz service calls >>>>> such as >>>>> this have not been upgraded to the required (when calling from a >>>>> secured >>>>> location) new method of invocation - as a form. You may either >>>>> wait for >>>>> someone to fix it for you or change the service call to be >>>>> invoked as part >>>>> of a form instead of as a URL. >>>>> >>>>> Hope this helps. >>>>> Regards, >>>>> Ruth >>>>> ---------------------------------------------------- >>>>> Find me on the web at http://www.myofbiz.com or Google keyword >>>>> "myofbiz" >>>>> [hidden email] >>>>> >>>>> >>>>> Info Olagos wrote: >>>>> >>>>> >>>>>> This is done now. >>>>>> >>>>>> Regards, >>>>>> Heidi >>>>>> >>>>>> 2010/1/7 Jacques Le Roux <[hidden email]> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>>> First thing to do is helping us to help you, please follow the >>>>>>> recommendation >>>>>>> >>>>>>> Thanks >>>>>>> >>>>>>> Jacques >>>>>>> >>>>>>> From: "Info Olagos" <[hidden email]> >>>>>>> >>>>>>> Hello, >>>>>>> >>>>>>> >>>>>>> >>>>>>>> When i try to unsubscribe from a contactlist in the screen >>>>>>>> "profile" in >>>>>>>> the >>>>>>>> ecommerce screen, i get the following error: >>>>>>>> >>>>>>>> >>>>>>>> Error calling event: >>>>>>>> org.ofbiz.webapp.event.EventHandlerException: Found >>>>>>>> URL >>>>>>>> parameter [contactListId] passed to secure (https) request- >>>>>>>> map with uri >>>>>>>> [updateContactListParty] with an event that calls service >>>>>>>> [updateContactListParty]; this is not allowed for security >>>>>>>> reasons! The >>>>>>>> data >>>>>>>> should be encrypted by making it part of the request body (a >>>>>>>> form field) >>>>>>>> instead of the request URL. >>>>>>>> >>>>>>>> Moreover it would be kind if you could create a Jira sub-task >>>>>>>> of >>>>>>>> https://issues.apache.org/jira/browse/OFBIZ-2330 >>>>>>>> (check before if a sub-task for this error does not exist). >>>>>>>> If you are not sure how to create a Jira issue please have a >>>>>>>> look before >>>>>>>> at >>>>>>>> http://docs.ofbiz.org/x/r. >>>>>>>> >>>>>>>> Thank you in advance for your help. >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Can anyone help me with a solution? >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Thanks, >>>>>>>> >>>>>>>> Heidi >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>> >>>> >>>> >> |
Re: contactlist in the screen "profile" in the ecommerce screen
|
|
Re: contactlist in the screen "profile" in the ecommerce screen
|
|
Re: contactlist in the screen "profile" in the ecommerce screen
|
|
Heidi, just make sure that you do indeed send your patch in if you've found an error and fixed one - otherwise, you'll get to answer the more painful question the hard way of whether upgrading OFBiz is in your future :) (just so it's clear - if you wanted to update OFBiz, but your fix didn't make it into the ASF repository yet, when you upgraded, you'd lose your fix and have to make that update again).
Cheers, Ruppert On Jan 7, 2010, at 3:57 PM, Ruth Hoffman wrote: > Hi Heidi: > > Congratulations! OFBiz is really pretty easy to work with, once you get the hang of it. > > While seasoned OFBiz developers will argue with me on this, IMHO sending patches in is much harder than actually fixing many of the problems you will encounter. First, you need to create a JIRA account. Next you will need to use either the command line or your IDE to generate the "patch" file. It doesn't really matter what development platform you are using - It just goes down hill from there. Here is the URL for exact instructions: > > http://cwiki.apache.org/confluence/display/OFBADMIN/OFBiz+Contributors+Best+Practices > > Based on that description, you can decide if patching OFBiz is in your future ;-) > > Regards, > Ruth > ---------------------------------------------------- > Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz" > [hidden email] > > > Info Olagos wrote: >> Hello Ruth, >> >> (I am proud because ) this is the first error i solved in ofbiz. >> So it works now with a form (without javascript). >> I only don't know how to make a patch? >> Can anyone explain this to me for a windows platform? >> >> thanks, >> Heidi >> 2010/1/7 Ruth Hoffman <[hidden email]> >> >> >>> Correct. Depending on the browser, you can style the submit button to look >>> like a link - if you want. What I've done is style my links to look like >>> buttons. >>> >>> ---------------------------------------------------- >>> Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz" >>> [hidden email] >>> Info Olagos wrote: >>> >>> >>>> ok thanks Ruth, >>>> >>>> I will try to fix it myself. >>>> Then i suppose i have to use a button instead of a link to click on? >>>> >>>> Heidi >>>> >>>> 2010/1/7 Ruth Hoffman <[hidden email]> >>>> >>>> >>>> >>>> >>>>> Hi Heidi: >>>>> The problem is that several of the existing OFBiz service calls such as >>>>> this have not been upgraded to the required (when calling from a secured >>>>> location) new method of invocation - as a form. You may either wait for >>>>> someone to fix it for you or change the service call to be invoked as >>>>> part >>>>> of a form instead of as a URL. >>>>> >>>>> Hope this helps. >>>>> Regards, >>>>> Ruth >>>>> ---------------------------------------------------- >>>>> Find me on the web at http://www.myofbiz.com or Google keyword "myofbiz" >>>>> [hidden email] >>>>> >>>>> >>>>> Info Olagos wrote: >>>>> >>>>> >>>>> >>>>> >>>>>> This is done now. >>>>>> >>>>>> Regards, >>>>>> Heidi >>>>>> >>>>>> 2010/1/7 Jacques Le Roux <[hidden email]> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>>> First thing to do is helping us to help you, please follow the >>>>>>> recommendation >>>>>>> >>>>>>> Thanks >>>>>>> >>>>>>> Jacques >>>>>>> >>>>>>> From: "Info Olagos" <[hidden email]> >>>>>>> >>>>>>> Hello, >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>> >>>>>>>> When i try to unsubscribe from a contactlist in the screen "profile" >>>>>>>> in >>>>>>>> the >>>>>>>> ecommerce screen, i get the following error: >>>>>>>> >>>>>>>> >>>>>>>> Error calling event: org.ofbiz.webapp.event.EventHandlerException: >>>>>>>> Found >>>>>>>> URL >>>>>>>> parameter [contactListId] passed to secure (https) request-map with >>>>>>>> uri >>>>>>>> [updateContactListParty] with an event that calls service >>>>>>>> [updateContactListParty]; this is not allowed for security reasons! >>>>>>>> The >>>>>>>> data >>>>>>>> should be encrypted by making it part of the request body (a form >>>>>>>> field) >>>>>>>> instead of the request URL. >>>>>>>> >>>>>>>> Moreover it would be kind if you could create a Jira sub-task of >>>>>>>> https://issues.apache.org/jira/browse/OFBIZ-2330 >>>>>>>> (check before if a sub-task for this error does not exist). >>>>>>>> If you are not sure how to create a Jira issue please have a look >>>>>>>> before >>>>>>>> at >>>>>>>> http://docs.ofbiz.org/x/r. >>>>>>>> >>>>>>>> Thank you in advance for your help. >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Can anyone help me with a solution? >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Thanks, >>>>>>>> >>>>>>>> Heidi >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> >>>> >> >> |
Re: contactlist in the screen "profile" in the ecommerce screen
|
|
Re: contactlist in the screen "profile" in the ecommerce screen
|
Administrator
|
| Free forum by Nabble | Edit this page |