Author: mor
Date: Fri Oct  9 14:22:40 2009
New Revision: 823560

URL: http://svn.apache.org/viewvc?rev=823560&view=rev
Log:
Applied fix from trunk for revision: 823559 
 Secure URLs in FTL. Applied patch from Akash Jain, part of OFBIZ-3019 
(https://issues.apache.org/jira/browse/OFBIZ-3019)

Modified:
    
ofbiz/branches/release09.04/applications/product/webapp/facility/facility/EditContactMech.ftl

Modified: 
ofbiz/branches/release09.04/applications/product/webapp/facility/facility/EditContactMech.ftl
URL: 
http://svn.apache.org/viewvc/ofbiz/branches/release09.04/applications/product/webapp/facility/facility/EditContactMech.ftl?rev=823560&r1=823559&r2=823560&view=diff
==============================================================================
--- 
ofbiz/branches/release09.04/applications/product/webapp/facility/facility/EditContactMech.ftl
 (original)
+++ 
ofbiz/branches/release09.04/applications/product/webapp/facility/facility/EditContactMech.ftl
 Fri Oct  9 14:22:40 2009
@@ -90,11 +90,19 @@
                       </#if>
                       (${uiLabelMap.CommonSince}: 
${facilityContactMechPurpose.fromDate})
                       <#if 
facilityContactMechPurpose.thruDate?has_content>(${uiLabelMap.CommonExpires}: 
${facilityContactMechPurpose.thruDate.toString()}</#if>
-                      &nbsp;<a 
href='<@ofbizUrl>deleteFacilityContactMechPurpose?facilityId=${facilityId}&contactMechId=${contactMechId}&contactMechPurposeTypeId=${facilityContactMechPurpose.contactMechPurposeTypeId}&fromDate=${facilityContactMechPurpose.fromDate.toString()}&DONE_PAGE=${donePage}&useValues=true</@ofbizUrl>'
 class='buttontext'>${uiLabelMap.CommonDelete}</a>
+                      <a 
href="javascript:$('deleteFacilityContactMechPurpose_${facilityContactMechPurpose_index}').submit();"
 class="buttontext">${uiLabelMap.CommonDelete}</a>
                   </td>
                 </tr>
                 <#-- toggle the row color -->
                 <#assign alt_row = !alt_row>
+                <form 
id="deleteFacilityContactMechPurpose_${facilityContactMechPurpose_index}" 
method="post" action="<@ofbizUrl>deleteFacilityContactMechPurpose</@ofbizUrl>">
+                  <input type="hidden" name="facilityId" 
value="${facilityId?if_exists}" />
+                  <input type="hidden" name="contactMechId" 
value="${contactMechId?if_exists}" />
+                  <input type="hidden" name="contactMechPurposeTypeId" 
value="${(facilityContactMechPurpose.contactMechPurposeTypeId)?if_exists}" />
+                  <input type="hidden" name="fromDate" 
value="${(facilityContactMechPurpose.fromDate)?if_exists}" />
+                  <input type="hidden" name="DONE_PAGE" 
value="${donePage?if_exists}" />
+                  <input type="hidden" name="useValues" value="true" />
+                </form>
               </#list>
               </#if>
               <tr>


Reply via email to