If you do a view source on the 4th step (with the Add button), do you get
name="id[1] value="Array"
instead of
name="id[1][value]" id="attrib-1"
Because that means you're seeing the issue.
Printable View
Reproduced using the demo products; see this posting.
@swguy, would you apply the following update to your ADMIN/includes/extra_datafiles/eo_sanitization.php to see if that corrects your issue (it corrected the issue with the demo product)?
Code:<?php
// -----
// Part of the Edit Orders plugin, v4.1.5 or later. This file defines the level of "sanitization" required by the adminSanitizer function,
// introduced in a patch-level of Zen Cart v1.5.5, so need to make sure that the "proper" version of the class is included.
//
if (defined ('PROJECT_VERSION_MAJOR') && version_compare (PROJECT_VERSION_MAJOR . '.' . PROJECT_VERSION_MINOR, '1.5.5', '>=') && class_exists ('AdminRequestSanitizer') && method_exists ('AdminRequestSanitizer', 'getInstance')) {
$eo_sanitizer = AdminRequestSanitizer::getInstance();
$eo_group = array (
'update_products' => array (
'sanitizerType' => 'MULTI_DIMENSIONAL',
'method' => 'post',
'pages' => array ('edit_orders'),
'params' => array (
'update_products' => array ('sanitizerType' => 'CONVERT_INT'),
'qty' => array ('sanitizerType' => 'FLOAT_VALUE_REGEX'),
'name' => array ('sanitizerType' => 'PRODUCT_DESC_REGEX'),
'onetime_charges' => array ('sanitizerType' => 'FLOAT_VALUE_REGEX'),
'attr' => array (
'sanitizerType' => 'MULTI_DIMENSIONAL',
'params' => array (
'attr' => array ('sanitizerType' => 'CONVERT_INT'),
'value' => array ('sanitizerType' => 'PRODUCT_DESC_REGEX'),
'type' => array ('sanitizerType' => 'CONVERT_INT')
)
),
'model' => array ('sanitizerType' => 'WORDS_AND_SYMBOLS_REGEX'),
'tax' => array ('sanitizerType' => 'FLOAT_VALUE_REGEX'),
'final_price' => array ('sanitizerType' => 'FLOAT_VALUE_REGEX'),
)
),
'id' => array (
'sanitizerType' => 'MULTI_DIMENSIONAL',
'method' => 'post',
'pages' => array ('edit_orders'),
'params' => array (
'id' => array ('sanitizerType' => 'CONVERT_INT'),
'type' => array ('sanitizerType' => 'CONVERT_INT'),
'value' => array ('sanitizerType' => 'PRODUCT_DESC_REGEX'),
),
)
);
$eo_sanitizer->addComplexSanitization ($eo_group);
}
Will test as soon as I get home.
Never mind; that worked on my test setup (1.5.5+sanitizer updated from 4/12/2016) but fails using the sanitizer that's delivered as part of ZC1.5.5a.
ok -standing by.
The problem is this test
if (defined ('PROJECT_VERSION_MAJOR') && version_compare (PROJECT_VERSION_MAJOR . '.' . PROJECT_VERSION_MINOR, '1.5.5', '>=') && class_exists ('AdminRequestSanitizer') && method_exists ('AdminRequestSanitizer', 'getInstance')) {
1.5.5a will fail as version_compare("1.5.5a", "1.5.5") = -1
drbyte suggests
(int)(PROJECT_VERSION_MAJOR . '.' . PROJECT_VERSION_MINOR <= '1.5.5');
Post 934: https://www.zen-cart.com/showthread....51#post1310851
was GOLD on vanilla 1.5.5. Worked like a champ.
Wilt's point is well taken - that check will have to be beefed up for 1.5.5a.