X-Cart: shopping cart software

X-Cart forums (https://forum.x-cart.com/index.php)
-   Changing design (https://forum.x-cart.com/forumdisplay.php?f=51)
-   -   Product Title - How to make it italic? (https://forum.x-cart.com/showthread.php?t=30910)

BobTastic 05-15-2007 12:20 PM

Re: Product Title - How to make it italic?
 
Thanks for the replies everyone. I really appreciate it. I have only just read through them. I will have a go at your suggestions this week.

Thanks,

Bob

minorgod 07-29-2008 05:55 PM

Re: Product Title - How to make it italic?
 
In the XCart 4.1.x branch you can also add the "product" field to the $trusted_post_variables array in the following files to stop tags from being stripped from the product title. You simply need to modify the following files:

/xcart/provider/product_modify.php
/xcart/admin/product_modify.php

Near the top of each of those files is a line that looks like:
PHP Code:

$trusted_post_variables = array("product_lng","product_new_descr","product_new_full_descr","descr","fulldescr","posted_data","js_code","efields"); 

Simply add the "product" field to the array definition like so:
PHP Code:

$trusted_post_variables = array("product","product_lng","product_new_descr","product_new_full_descr","descr","fulldescr","posted_data","js_code","efields"); 

I do not know what security holes this could open up other than possibly making it easy for unscrupulous providers to create some kind of script attack via the product title field.


All times are GMT -8. The time now is 03:44 PM.

Powered by vBulletin Version 3.5.4
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.