Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Leaderboard

Popular Content

Showing content with the highest reputation on 12/06/2019 in all areas

  1. Updated to: Add note about disabling stock cart and potability of conflict with js code in hook reported by @LeeFoster Update to an old add-on, all credit to original author: Gergely V1.0 18/07/2015 JcM Footer Modal Cart V1.6
    1 point
  2. ecartz

    Google XML Sitemap SEO

    Found it. The App is called Store Configuration Monitor and it has a bug in its helper functions. In admin/includes/functions/general.php change the two functions to function tep_configuration_update($cID, $configuration_value) { $configuration_values_query = tep_db_query("select configuration_value, configuration_title, configuration_description from configuration where configuration_id = '" . (int)$cID . "'"); $configuration_values = tep_db_fetch_array($configuration_values_query); tep_db_query("insert into configuration_changes (change_date,previous_setting,new_setting,change_title,change_description) values (now(),'". tep_db_input(tep_db_prepare_input($configuration_values['configuration_value'])) ."','". tep_db_input(tep_db_prepare_input($configuration_value)) ."','". tep_db_input(tep_db_prepare_input($configuration_values['configuration_title'])) ."','". tep_db_input(tep_db_prepare_input($configuration_values['configuration_description']))."')"); // Check to see if the configuration value changed is the Store Owner's Email address - if it is send a configuration change notification to the existing Email address on file. if($cID == 3) { tep_mail(STORE_OWNER, $configuration_values['configuration_value'], EMAIL_CONFIGURATION_CHANGE_TEXT_SUBJECT, EMAIL_CONFIGURATION_CHANGE_TEXT_BODY, STORE_OWNER, $configuration_values['configuration_value']); } tep_mail(STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS, EMAIL_CONFIGURATION_CHANGE_TEXT_SUBJECT, EMAIL_CONFIGURATION_CHANGE_TEXT_BODY, STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS); } function tep_module_change($action, $class) { tep_db_query("insert into configuration_changes (change_date,previous_setting,new_setting,change_title,change_description) values (now(),'','". tep_db_input(tep_db_prepare_input($action)) ."','". tep_db_input(tep_db_prepare_input($class)) ."','')"); tep_mail(STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS, EMAIL_CONFIGURATION_CHANGE_TEXT_SUBJECT, EMAIL_CONFIGURATION_CHANGE_TEXT_BODY, STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS); } Then you should be able to update values normally in admin.
    1 point
  3. Probably, this contribution does not use the osC way of doing an insert (using function tep_db_perform in includes/functions/database.php) and therefore it doesn't put a backslash in front of the apostrophe, therefore MySQL sees it as the end of the string and when it sees the next apostrophe: error.The function tep_db_perform adds slashes in this line: default: $query .= '\'' . tep_db_input($value) . '\', '; where tep_db_input does the addslashes (a PHP function): function tep_db_input($string) { return addslashes($string); }
    1 point
×
×
  • Create New...