8 May 2010, 6:03 PM
Totally Zenned
- Join Date:
- Aug 2007
- Location:
- Gijón, Asturias, Spain
- Posts:
- 2,873
- Plugin Contributions:
- 7
[NOT A BUG] customers.php - difference between 1.39b and bugfixed 138a
Hi,
this announcement
http://www.zen-cart.com/forum/showthread.php?p=813183#post813183
details a bugfix for XSS protection.
One of the files is admin/customers.php and the fix for 138a is:
default:
if (isset($cInfo) && is_object($cInfo)) {
if (isset($_GET['search'])) $_GET['search'] = zen_output_string_protected($_GET['search']);
$customers_orders = $db->Execute("select o.orders_id, o.date_purchased, o.order_total, o.currency, o.currency_value,
in 1.39b I find:
default:
if (isset($_GET['search'])) $_GET['search'] = zen_output_string_protected($_GET['search']);
if (isset($cInfo) && is_object($cInfo)) {
$customers_orders = $db->Execute("select o.orders_id, o.date_purchased, o.order_total, o.currency, o.currency_value,
does this matter?
Steve
