diff options
| author | Roger Rehnelt <noreply@maennchen1.de> | 2026-10-03 15:38:49 +0200 |
|---|---|---|
| committer | Roger Rehnelt <noreply@maennchen1.de> | 2026-10-03 15:38:49 +0200 |
| commit | f786f0c59d9a95d6829aaf58d99c882a609355ed (patch) | |
| tree | 3b6e97793ed5c1eaffcc06dbecd94f62f55f8287 /views/mods/mod_revocation/mail_row_html.phtml | |
| parent | 6b03b7e7a5b47b52ea5d5b6aae2efb945f4dd686 (diff) | |
Widerrufsformular: Bestätigung ohne Bestelldaten, Name und Schlüssel
Jeder Widerruf wird angenommen; die Eingangsbestätigung an die eingetragene Adresse enthält nur die eigenen Angaben, der Betreiber bekommt die Bestelldaten mit Vermerken. Neues Pflichtfeld Name; der Link aus der Bestellmail bestätigt den Widerruf.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to 'views/mods/mod_revocation/mail_row_html.phtml')
| -rwxr-xr-x | views/mods/mod_revocation/mail_row_html.phtml | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/views/mods/mod_revocation/mail_row_html.phtml b/views/mods/mod_revocation/mail_row_html.phtml index 4628b9d..ae060c1 100755 --- a/views/mods/mod_revocation/mail_row_html.phtml +++ b/views/mods/mod_revocation/mail_row_html.phtml @@ -13,13 +13,14 @@ $amount = $this->view['wpsg_mod_revocation']['amount']; $order_product_id = intval($this->view['wpsg_mod_revocation']['order_product_id']); - $revo_url = home_url('/').'?wpsg_revo_order='.urlencode($order_nr).'&wpsg_revo_product='.urlencode($product_nr).'&wpsg_revo_amount='.urlencode($amount); + // Schlüssel der Bestellung (S18): bestätigt den Widerruf; keine Nonce, siehe Revocation::orderToken() + $revo_url = home_url('/').'?wpsg_revo_order='.urlencode($order_nr).'&wpsg_revo_product='.urlencode($product_nr).'&wpsg_revo_amount='.urlencode($amount).'&wpsg_revo_key='.urlencode((string)($this->view['wpsg_mod_revocation']['key'] ?? '')); ?> <tr class="productrow productrow2 <?php echo ((($i % 2) == 0)?'productrow_odd':'productrow_even'); ?>"> <td style="padding:4px; line-height:100%; vertical-align:middle;" class="col_pos"> </td> <td style="padding:4px; line-height:100%; vertical-align:middle;" class="col_name"><?php echo __('Widerruf', 'wpsg'); ?>:</td> <td style="padding:4px; line-height:100%; vertical-align:middle;" class="col_name" colspan="4"> - <a href="<?php echo $revo_url; ?>"><?php echo __('Vertrag widerrufen', 'wpsg'); ?></a> + <a href="<?php echo esc_url($revo_url); ?>"><?php echo __('Vertrag widerrufen', 'wpsg'); ?></a> </td> </tr> |