If this is release 9.04 and its a bug then we should not forget this.

Thanks
--
Pranay Pandey




On Apr 29, 2009, at 12:03 AM, BJ Freeman wrote:

forgot this is release 9.04

BJ Freeman sent the following on 4/28/2009 11:20 AM:
I know this has been discussed on the dev list. I would love to provide patches. I am guessing this has to be changed to a post, if I understand
right.

it seems most of the delete button in catalog section come up with
similar messages.
https://localhost:8443/catalog/control/promo_deleteProductStorePromoAppl?productStoreId=TestStore&productPromoId=9019&fromDate=2009-04-27%2015:11:56.0

Error calling event: org.ofbiz.webapp.event.EventHandlerException: Found URL parameter [productStoreId] passed to secure (https) request-map with uri [promo_deleteProductStorePromoAppl] with an event that calls service [deleteProductStorePromoAppl]; this is not allowed for security reasons!
The data should be encrypted by making it part of the request body (a
form field) instead of the request URL.

--
BJ Freeman
http://www.businessesnetwork.com/automation
http://bjfreeman.elance.com
http://www.linkedin.com/profile?viewProfile=&key=1237480&locale=en_US&trk=tab_pro
Systems Integrator.


Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to