CSS3 Buttons [support thread]

[lat9]

Some parts of the patch were missed; it still needs attention.

This plugin only modifies /includes/functions/html_output.php and the updated version includes that single-line change within that script.

[swguy]

These lines were also changed; there were three changes.

462c462
<   function zen_draw_hidden_field($name, $value = '~*~*#', $parameters = '') {
---
>   function zen_draw_hidden_field($name, $value = '', $parameters = '') {
465c465
<     if (zen_not_null($value) && $value != '~*~*#') {
---
>     if (zen_not_null($value)) {

[lat9]

I feel like I'm flogging a dead horse, but here goes. The diff that DrByte posted in the changes necessary for the security patch for this file specified a single line (the change to the password-related function) and did not include the lines that you reference.

[swguy]

I am referencing the download from this page:
https://www.zen-cart.com/showthread....-November-2015

[barco57]

I see the confusion...." as shown in this code diff: XSS fix " only shows the fix for the specific XSS problem, whereas the entire "Patched file: /includes/functions/html_output.php" contains additional updates to that file for 1.5.5/1.6.0 that are there for other reasons separate from the XSS problem

[lat9]

Regardless the confusion, v1.1.1 is now available for download from the Plugins.

[lat9]

I've just submitted v1.1.2 to the plugins for review. That version incorporates downward-compatible changes introduced in Zen Cart v1.5.5.

Please note that the base functionality of this plugin has been included in the Zen Cart core since v1.5.2. This plugin now extends that functionality, providing a method to insert Font Awesome glyphs into your CSS buttons. If you are running Zen Cart v1.5.2 or later, you'll need to install this plugin only if you want that additional functionality for your store.