diff options
| author | Daniel Schmitzer <noreply@maennchen1.de> | 2019-10-29 15:05:47 +0000 |
|---|---|---|
| committer | Daniel Schmitzer <noreply@maennchen1.de> | 2019-10-29 15:05:47 +0000 |
| commit | 0bde306bb2609cd6d4effabbcf5a8a6b66a99f11 (patch) | |
| tree | 94bcdd6c70749549c021bc6bcdce25484a8a2d0c /views/order | |
| parent | 01b391fc3fc32fd17a8999257e7ce6302eaed843 (diff) | |
- Bugfix: Verlinkung im Backend zum Produkt mit Nounce geschützt
git-svn-id: https://[internal]/wordpress/plugins/wpsg4@7590 0d5edaf7-2b12-4e95-93f4-047927463d4b
Diffstat (limited to 'views/order')
| -rw-r--r-- | views/order/product_table.phtml | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/views/order/product_table.phtml b/views/order/product_table.phtml index 0eb1666..fb98ba4 100644 --- a/views/order/product_table.phtml +++ b/views/order/product_table.phtml @@ -57,7 +57,11 @@ <img src="<?php echo WPSG_URL; ?>views/gfx/eu.png" alt="<?php echo __('Produkt unterliegt der EU-Leistungsortregel', 'wpsg'); ?>" title="<?php echo __('Produkt unterliegt der EU-Leistungsortregel', 'wpsg'); ?>" height="14" />
<?php } ?>
- <a href="<?php echo WPSG_URL_WP; ?>wp-admin/admin.php?page=wpsg-Produkt&action=edit&edit_id=<?php echo $p['product_id']; ?>" title="<?php echo __('Zum Produkt', 'wpsg'); ?>">
+ <a href="<?php
+
+ echo wp_nonce_url(WPSG_URL_WP.'wp-admin/admin.php?page=wpsg-Produkt&action=edit&edit_id='.$p['product_id'], 'wpsg-product-edit-'.wpsg_getInt($p['product_id']));
+
+ ?>" title="<?php echo __('Zum Produkt', 'wpsg'); ?>">
<?php echo wpsg_hspc($this->getProductName($p['product_id'])); ?>
</a>
<a href="#" class="wpsg-glyphlink-td" title="<?php echo __('Produkt bearbeiten', 'wpsg'); ?>" onclick="return WPSG_BE_Product.editProduct(<?php echo $p['order_product_id']; ?>);"><span class="glyphicon glyphicon-pencil"></span></a>
|