Product Attribute Grid

[gilby]

I get a "page NOT found"?

[barendfaber]

Hi all,

Hope someone can help me! I have re-created my site on 1.5.1, please see product page http://www.fossilandrock.co.uk/cryst...gate-blue-lace. When I try to add options, it does not add it to my cart at all, it just shows the product and the charge is £ 0.00. How can I fix this?

B

[barendfaber]

k,

I installed the attributes grid contribution on a stock 1.3.8 install with the most up to date Security patch file.

It does in fact stop this contribution from adding items to the cart.

The reason is, that the security patch uses a whitelist of characters that are allowed in the to be keys of the products_id array.

The attribute grid contribution uses extended product ids, as keys and these fail the whitelist test.

The fix is fairly simple.

In the security patch, there is a function called.

securityPatchSanitizePostVariableProductsId

and in this is the line

if (ereg_replace('[0-9a-zA-z_]', '', $key) != '') 

this should be changed to

if (ereg_replace('[0-9a-zA-z_:]', '', $key) != '') 

We will look to release an updated patch (probably this weekend)

Our apologies for the inconvenience, however we took the position that using a whitelist was more secure than relying on a simple blacklist.

Hi everyone,

I have asked a few days ago for some help as my products are simply not added to the cart, just worried support on this thread is now non-existent as no one seems to want to reply. Using version 1.5.1, www.fossilandrock.co.uk.

From the above, I found /includes/extra_configures/security_patch_v138_20080919.php. On this I cannot find the above, only at the bottom if (preg_replace('/[0-9a-zA-z_:.]/', '', $key) != ''). This does not quite match the above, but could this be the culprit that prevents my products to be added to the cart?

B

[DrByte]

The rewritten preg_replace you quoted is newer and compatible with contemporary versions of PHP. The old ereg_replace was for PHP 4, and is now obsolete.

[barendfaber]

The rewritten preg_replace you quoted is newer and compatible with contemporary versions of PHP. The old ereg_replace was for PHP 4, and is now obsolete.

Hi DrByte. Thanks for the reply. What else could be happening as my attributes are not sent to my cart?

B

[barendfaber]

Hi,

I hope someone can help me. I am using version 1.5.1, www.fossilandrock.co.uk. I have Product Attribute Grid installed, as we offer products that are available in different sizes and we would like customers to add multiple options to their cart (here is an example http://www.fossilandrock.co.uk/cryst...43d45368ab0abd). However, what I have found is that when I click "Add to cart", the attributes are not added, and the product shows up as £ 0.00. I just wanted to confirm, is Fast and Easy Checkout compatible with the Product Attribute Grid and Stock by Attributes?

B

[wilt]

Hi,

I took a quick look at your site. The problem does not seem to stem from parameter sanitization (as per your post http://www.zen-cart.com/showthread.p...42#post1208642)

Looking at the page source, there appears to be missing hidden fields on the page, that the attribute need to process when adding the product to the cart.
Not sure why that is happening though. I will try and do a integration on a clean v1.5 to see if that sheds any light.
Also given that it is the product page that is the problem, it's unlikely to be anything related to fast & easy.

[barendfaber]

Hi developers,

I could not make this module work at all, and found this morning that the module is actually broken.

What I have done:

1. Installed fresh version of 1.5.1 on www.torfarm.retailjunction.co.uk
2. Installed 1.5.1 version template of bentley_classic
3. Installed Stock by attributes (as this was a fresh install I allowed simple overwrite of files) (latest version loaded by kuroi on 03 Jan 2013)
4. Installed Product Attribute Grid 1.2 (updated by Absolute on 02 Nov 2012)

My attributes are not added to the cart, same as with my main site, please test. I have compared and have noticed from your version for 1.3.9, two files are missing from the 1.5 version, tpl_product_info_display.php and tpl_modules_attributes.php. Were these really unnecessary files? Could you please have a re-look at this module and fix? Your help here is greatly appreciated.

Kind regards

B

[barendfaber]

Just PM'd Absolute but mailbox full....

[barendfaber]

While you're at it, could I ask another favour? The module is a bit "broken" in Firefox. It displays correctly in Chrome and Internet Explorer, however in Firefox the heading "size" is displayed on the left hand side, next to the attribute options, and I have tried all variations of CSS but cannot seem to move the "size" to above the options, so that "size" and "quantity" is displayed in one line, each above their own column.

Thanks!