Forums / General Questions / Allowing Html in the Order Comments?

Allowing Html in the Order Comments?

Locked

Views: 1,223

Results 1 to 5 of 5
This thread is locked. New replies are disabled.
14 Dec 2008, 10:59 PM
#1
sino avatar

sino

New Zenner

Join Date:
Jan 2006
Posts:
11
Plugin Contributions:
0

Allowing Html in the Order Comments?

Hello, This is my 3rd day, searching for a possible solution. I would like to be able to embed html code inside the order comments, and for it to be viewable in the customers order history section. Is this possilbe, I have seen the question asked in the forums, but they have not been answered, any help would be appreciated.

thank you
sino

16 Dec 2008, 9:29 AM
#2
fairestcape avatar

fairestcape

Totally Zenned

Join Date:
Mar 2008
Location:
Cape Town & London (depends on the season)
Posts:
2,957
Plugin Contributions:
0

Re: Allowing Html in the Order Comments?

What is the reason why you would want to enable HTML formatting?

Besides... most customers are unlikely to know HTML code, or how to embed it in their message.

16 Dec 2008, 7:00 PM
#3
sino avatar

sino

New Zenner

Join Date:
Jan 2006
Posts:
11
Plugin Contributions:
0

Re: Allowing Html in the Order Comments?

Hi, thank you for your reply -

Well I wanted to embed design files for the customers to proof - Didnt want customers to embed anything - I did mange to figure out how to do it, for anyone who might want this - inside tpl_account_history_info file - remove the zen_output_string_protected

Thanks Again

16 Dec 2008, 7:50 PM
#4
wilt avatar

wilt

Oji-san

Join Date:
Jun 2003
Location:
Newcastle UK
Posts:
1,927
Plugin Contributions:
3

Re: Allowing Html in the Order Comments?

Hi,

Are you using v1.3.8, As far as I am aware even removing the zen_output_string_protected from tpl_account_history_info.php should not allow the display of HTML from a comment inputted by a customer.

If it does, then be aware that the fact that html is being displayed, based on customer input may open you up to XSS security hacks.

17 Dec 2008, 2:53 AM
#5
sino avatar

sino

New Zenner

Join Date:
Jan 2006
Posts:
11
Plugin Contributions:
0

Re: Allowing Html in the Order Comments?

Im using the latest zen 1.38 - Your right - removing that does not allow customers to embed html - ( which i did not want customers to do so) - but i does allow admin to embed html.