Author: ashish
Date: Sat Aug  8 15:33:34 2009
New Revision: 802395

URL: http://svn.apache.org/viewvc?rev=802395&view=rev
Log:
Applied patch from jira issue OFBIZ-2819 (Non secure Url in edit category 
product.)
Thanks Vivek for the patch.

Modified:
    
ofbiz/trunk/applications/product/webapp/catalog/category/EditCategoryProducts.ftl

Modified: 
ofbiz/trunk/applications/product/webapp/catalog/category/EditCategoryProducts.ftl
URL: 
http://svn.apache.org/viewvc/ofbiz/trunk/applications/product/webapp/catalog/category/EditCategoryProducts.ftl?rev=802395&r1=802394&r2=802395&view=diff
==============================================================================
--- 
ofbiz/trunk/applications/product/webapp/catalog/category/EditCategoryProducts.ftl
 (original)
+++ 
ofbiz/trunk/applications/product/webapp/catalog/category/EditCategoryProducts.ftl
 Sat Aug  8 15:33:34 2009
@@ -81,8 +81,7 @@
                                 <textarea name="comments${suffix}" rows="2" 
cols="40">${(productCategoryMember.comments)?if_exists}</textarea>
                             </td>
                             <td align="center">
-                            <a 
href="<@ofbizUrl>removeCategoryProductMember?VIEW_SIZE=${viewSize}&VIEW_INDEX=${viewIndex}&productId=${(productCategoryMember.productId)?if_exists}&productCategoryId=${(productCategoryMember.productCategoryId)?if_exists}&fromDate=${productCategoryMember.getString("fromDate")}&activeOnly=${activeOnly.toString()}</@ofbizUrl>"
 class="buttontext">
-                            ${uiLabelMap.CommonDelete}</a>
+                              <a 
href="javascript:document.deleteProductFromCategory_${productCategoryMember.productId}.submit();"
 class="buttontext">${uiLabelMap.CommonDelete}</a>
                             </td>
                         </tr>
                         <#-- toggle the row color -->
@@ -99,6 +98,16 @@
                         </td>
                     </tr>
                 </form>
+                <#list productCategoryMembers as productCategoryMember>
+                    <form 
name="deleteProductFromCategory_${productCategoryMember.productId}" 
method="post" action="<@ofbizUrl>removeCategoryProductMember</@ofbizUrl>">
+                        <input type="hidden" name="VIEW_SIZE" 
value="${viewSize}"/>
+                        <input type="hidden" name="VIEW_INDEX" 
value="${viewIndex}"/>
+                        <input type="hidden" name="productId" 
value="${(productCategoryMember.productId)?if_exists}"/>
+                        <input type="hidden" name="productCategoryId" 
value="${(productCategoryMember.productCategoryId)?if_exists}"/>
+                        <input type="hidden" name="fromDate" 
value="${(productCategoryMember.fromDate)?if_exists}"/>
+                        <input name="activeOnly" type="hidden" 
value="${activeOnly.toString()}"/>
+                    </form>
+                </#list>
             </#if>
         </table>
     </div>


Reply via email to