svn commit: r790516 - /ofbiz/branches/release09.04/applications/order/webapp/ordermgr/order/ordernotes.ftl

[mor-2]

Author: mor
Date: Thu Jul  2 09:20:28 2009
New Revision: 790516

URL: http://svn.apache.org/viewvc?rev=790516&view=rev
Log:
Applied fix from trunk for revision: 790512
 Secure URLs in FTL. Applied patch from Sharad Gupta, part of OFBIZ-2683 (https://issues.apache.org/jira/browse/OFBIZ-2683)

Modified:
    ofbiz/branches/release09.04/applications/order/webapp/ordermgr/order/ordernotes.ftl

Modified: ofbiz/branches/release09.04/applications/order/webapp/ordermgr/order/ordernotes.ftl
URL: http://svn.apache.org/viewvc/ofbiz/branches/release09.04/applications/order/webapp/ordermgr/order/ordernotes.ftl?rev=790516&r1=790515&r2=790516&view=diff
==============================================================================
--- ofbiz/branches/release09.04/applications/order/webapp/ordermgr/order/ordernotes.ftl (original)
+++ ofbiz/branches/release09.04/applications/order/webapp/ordermgr/order/ordernotes.ftl Thu Jul  2 09:20:28 2009
@@ -47,11 +47,21 @@
                   <td align="right" valign="top" width="15%">
                     <#if note.internalNote?if_exists == "N">
                         ${uiLabelMap.OrderPrintableNote}
-                        <a href="<@ofbizUrl>updateOrderNote?orderId=${orderId}&noteId=${note.noteId}&internalNote=Y</@ofbizUrl>" class="buttontext">${uiLabelMap.OrderNotesPrivate}</a>
+                        <form name="privateNotesForm_${note_index}" method="post" action="<@ofbizUrl>updateOrderNote</@ofbizUrl>">
+                          <input type="hidden" name="orderId" value="${orderId}"/>
+                          <input type="hidden" name="noteId" value="${note.noteId}"/>
+                          <input type="hidden" name="internalNote" value="Y"/>
+                          <a href="javascript:document.privateNotesForm_${note_index}.submit()" class="buttontext">${uiLabelMap.OrderNotesPrivate}</a>
+                        </form>
                     </#if>
                     <#if note.internalNote?if_exists == "Y">
                         ${uiLabelMap.OrderNotPrintableNote}
-                        <a href="<@ofbizUrl>updateOrderNote?orderId=${orderId}&noteId=${note.noteId}&internalNote=N</@ofbizUrl>" class="buttontext">${uiLabelMap.OrderNotesPublic}</a>
+                        <form name="publicNotesForm_${note_index}" method="post" action="<@ofbizUrl>updateOrderNote</@ofbizUrl>">
+                          <input type="hidden" name="orderId" value="${orderId}"/>
+                          <input type="hidden" name="noteId" value="${note.noteId}"/>
+                          <input type="hidden" name="internalNote" value="N"/>
+                          <a href="javascript:document.publicNotesForm_${note_index}.submit()" class="buttontext">${uiLabelMap.OrderNotesPublic}</a>
+                        </form>
                     </#if>
                   </td>
                 </tr>