svn commit: r811817 - /ofbiz/trunk/applications/product/webapp/catalog/category/EditCategoryFeatureCats.ftl

[lektran]

Author: lektran
Date: Sun Sep  6 12:10:23 2009
New Revision: 811817

URL: http://svn.apache.org/viewvc?rev=811817&view=rev
Log:
Fixed unsecured https parameter issue reported by Michael Alleblas, OFBIZ-2892

Modified:
    ofbiz/trunk/applications/product/webapp/catalog/category/EditCategoryFeatureCats.ftl

Modified: ofbiz/trunk/applications/product/webapp/catalog/category/EditCategoryFeatureCats.ftl
URL: http://svn.apache.org/viewvc/ofbiz/trunk/applications/product/webapp/catalog/category/EditCategoryFeatureCats.ftl?rev=811817&r1=811816&r2=811817&view=diff
==============================================================================
--- ofbiz/trunk/applications/product/webapp/catalog/category/EditCategoryFeatureCats.ftl (original)
+++ ofbiz/trunk/applications/product/webapp/catalog/category/EditCategoryFeatureCats.ftl Sun Sep  6 12:10:23 2009
@@ -54,7 +54,12 @@
                         </form>
                     </td>
                     <td align="center">
-                        <a href="<@ofbizUrl>removeProductFeatureCatGrpAppl?productFeatureGroupId=${(productFeatureCatGrpAppl.productFeatureGroupId)?if_exists}&productCategoryId=${(productFeatureCatGrpAppl.productCategoryId)?if_exists}&fromDate=${productFeatureCatGrpAppl.getString("fromDate")}</@ofbizUrl>" class="buttontext">${uiLabelMap.CommonDelete}</a>
+                        <a href="javascript:document.removeProductFeatureCatGrpApplForm_${productFeatureCatGrpAppl_index}.submit()" class="buttontext">${uiLabelMap.CommonDelete}</a>
+                        <form method="post" action="<@ofbizUrl>removeProductFeatureCatGrpAppl</@ofbizUrl>" name="removeProductFeatureCatGrpApplForm_${productFeatureCatGrpAppl_index}">
+                            <input type="hidden" name="productFeatureGroupId" value="${(productFeatureCatGrpAppl.productFeatureGroupId)?if_exists}">
+                            <input type="hidden" name="productCategoryId" value="${(productFeatureCatGrpAppl.productCategoryId)?if_exists}">
+                            <input type="hidden" name="fromDate" value="${productFeatureCatGrpAppl.getString("fromDate")}">
+                        </form>
                     </td>
                 </tr>
                 <#-- toggle the row color -->
@@ -125,7 +130,12 @@
                         </form>
                     </td>
                     <td align="center">
-                    <a href="<@ofbizUrl>removeProductFeatureCategoryAppl?productFeatureCategoryId=${(productFeatureCategoryAppl.productFeatureCategoryId)?if_exists}&productCategoryId=${(productFeatureCategoryAppl.productCategoryId)?if_exists}&fromDate=${productFeatureCategoryAppl.getString("fromDate")}</@ofbizUrl>" class="buttontext">${uiLabelMap.CommonDelete}</a>
+                    <a href="javascript:document.removeProductFeatureCategoryApplForm_${productFeatureCategoryAppl_index}.submit()" class="buttontext">${uiLabelMap.CommonDelete}</a>
+                    <form method="post" action="<@ofbizUrl>removeProductFeatureCategoryAppl</@ofbizUrl>" name="removeProductFeatureCategoryApplForm_${productFeatureCategoryAppl_index}">
+                        <input type="hidden" name="productFeatureCategoryId" value="${(productFeatureCategoryAppl.productFeatureCategoryId)?if_exists}">
+                        <input type="hidden" name="productCategoryId" value="${(productFeatureCategoryAppl.productCategoryId)?if_exists}">
+                        <input type="hidden" name="fromDate" value="${productFeatureCategoryAppl.getString("fromDate")}">
+                    </form>
                     </td>
                 </tr>
                 <#-- toggle the row color -->