svn commit: r790516 - /ofbiz/branches/release09.04/applications/order/webapp/ordermgr/order/ordernotes.ftl

[mor]

Author: mor
Date: Thu Jul  2 09:20:28 2009
New Revision: 790516

URL: http://svn.apache.org/viewvc?rev=790516&view=rev
Log:
Applied fix from trunk for revision: 790512 
 Secure URLs in FTL. Applied patch from Sharad Gupta, part of OFBIZ-2683 
(https://issues.apache.org/jira/browse/OFBIZ-2683)

Modified:
    
ofbiz/branches/release09.04/applications/order/webapp/ordermgr/order/ordernotes.ftl

Modified: 
ofbiz/branches/release09.04/applications/order/webapp/ordermgr/order/ordernotes.ftl
URL: 
http://svn.apache.org/viewvc/ofbiz/branches/release09.04/applications/order/webapp/ordermgr/order/ordernotes.ftl?rev=790516&r1=790515&r2=790516&view=diff
==============================================================================
--- 
ofbiz/branches/release09.04/applications/order/webapp/ordermgr/order/ordernotes.ftl
 (original)
+++ 
ofbiz/branches/release09.04/applications/order/webapp/ordermgr/order/ordernotes.ftl
 Thu Jul  2 09:20:28 2009
@@ -47,11 +47,21 @@
                   <td align="right" valign="top" width="15%">
                     <#if note.internalNote?if_exists == "N">
                         ${uiLabelMap.OrderPrintableNote}
-                        <a 
href="<@ofbizUrl>updateOrderNote?orderId=${orderId}&noteId=${note.noteId}&internalNote=Y</@ofbizUrl>"
 class="buttontext">${uiLabelMap.OrderNotesPrivate}</a>
+                        <form name="privateNotesForm_${note_index}" 
method="post" action="<@ofbizUrl>updateOrderNote</@ofbizUrl>">
+                          <input type="hidden" name="orderId" 
value="${orderId}"/>
+                          <input type="hidden" name="noteId" 
value="${note.noteId}"/>
+                          <input type="hidden" name="internalNote" value="Y"/>
+                          <a 
href="javascript:document.privateNotesForm_${note_index}.submit()" 
class="buttontext">${uiLabelMap.OrderNotesPrivate}</a>
+                        </form>
                     </#if>
                     <#if note.internalNote?if_exists == "Y">
                         ${uiLabelMap.OrderNotPrintableNote}
-                        <a 
href="<@ofbizUrl>updateOrderNote?orderId=${orderId}&noteId=${note.noteId}&internalNote=N</@ofbizUrl>"
 class="buttontext">${uiLabelMap.OrderNotesPublic}</a>
+                        <form name="publicNotesForm_${note_index}" 
method="post" action="<@ofbizUrl>updateOrderNote</@ofbizUrl>">
+                          <input type="hidden" name="orderId" 
value="${orderId}"/>
+                          <input type="hidden" name="noteId" 
value="${note.noteId}"/>
+                          <input type="hidden" name="internalNote" value="N"/>
+                          <a 
href="javascript:document.publicNotesForm_${note_index}.submit()" 
class="buttontext">${uiLabelMap.OrderNotesPublic}</a>
+                        </form>
                     </#if>
                   </td>
                 </tr>