Login  Register

[jira] Closed: (OFBIZ-3934) paymentMethodTypeId

Posted by Nicolas Malin (Jira) on Oct 04, 2010; 8:31am
URL: http://ofbiz.116.s1.nabble.com/jira-Created-OFBIZ-3934-paymentMethodTypeId-tp2535763p2953978.html


     [ https://issues.apache.org/jira/browse/OFBIZ-3934?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux closed OFBIZ-3934.
----------------------------------

         Assignee: Jacques Le Roux
    Fix Version/s: Release Branch 09.04
                   Release Branch 10.04
                   SVN trunk
       Resolution: Fixed

Fixed at r1004139 in trunk, R10.04 at r1004140, R9.04 at r1004141.

> paymentMethodTypeId
> -------------------
>
>                 Key: OFBIZ-3934
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-3934
>             Project: OFBiz
>          Issue Type: Sub-task
>          Components: accounting
>    Affects Versions: SVN trunk
>         Environment: Debian Lenny + ofbiz-r952591
>            Reporter: Jonatan Soto
>            Assignee: Jacques Le Roux
>            Priority: Minor
>             Fix For: Release Branch 09.04, Release Branch 10.04, SVN trunk
>
>
> Found this error when changing the records to show in the paginated list.
> [ServiceEventHandler.java:406:ERROR] =============== Found URL parameter [paymentMethodTypeId] passed to secure (https) request-map with uri [updatePaymentMethodType] with an event that calls service [updatePaymentMethodType]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. Moreover it would be kind if you could create a Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 (check before if a sub-task for this error does not exist). If you are not sure how to create a Jira issue please have a look before at http://cwiki.apache.org/confluence/x/JIB2 Thank you in advance for your help.; In session [FC48E005EF7E4D31A875637F52EB2934.jvm1]; Note that this can be changed using the service.http.parameters.require.encrypted property in the url.properties file
> 2010-09-11 17:22:06,390 (TP-Processor11) [     RequestHandler.java:421:ERROR] Request updatePaymentMethodType caused an error with the following message: Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [paymentMethodTypeId] passed to secure (https) request-map with uri [updatePaymentMethodType] with an event that calls service [updatePaymentMethodType]; this is not allowed for security reasons! The data should be encrypted by making it part of the request body (a form field) instead of the request URL. Moreover it would be kind if you could create a Jira sub-task of https://issues.apache.org/jira/browse/OFBIZ-2330 (check before if a sub-task for this error does not exist). If you are not sure how to create a Jira issue please have a look before at http://cwiki.apache.org/confluence/x/JIB2 Thank you in advance for your help.

--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.