Skip to content

Issue #9: [Vendor-profile logo- frontend/backend]- Shows alert when user use payload for image #46

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
deepa-g wants to merge 19 commits into
base: release-1.4.4
Choose a base branch
from
Open

Issue #9: [Vendor-profile logo- frontend/backend]- Shows alert when user use payload for image #46

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
19 commits
Select commit Hold shift + click to select a range
9454175
Bug #144308 fix: TJVendors Reports and Profile page is messup on BS2 …
deepa-g May 7, 2019
3720340
Bug #144308 fix: TJVendors Reports and Profile page is messup on BS2 …
deepa-g May 8, 2019
2e136c5
Issue 4 fix: TJVendors Reports and Profile page is looking messed up …
deepa-g May 15, 2019
bf20411
Issue 4 fix: TJVendors Reports and Profile page is looking messed up …
deepa-g May 15, 2019
49dc6ac
Bug #144308 fix: TJVendors Reports and Profile page is looking messed…
deepa-g May 15, 2019
23b68a0
Issue 4 fix: TJVendors Reports and Profile page is looking messed up …
deepa-g May 20, 2019
439fdff
Update en-GB.com_tjvendors.ini
manojLondhe May 20, 2019
34436b5
Issue 4 fix: TJVendors Reports and Profile page is looking messed up …
deepa-g May 20, 2019
1e48d47
Issue 4 fix: TJVendors Reports and Profile page is looking messed up …
deepa-g May 20, 2019
efef52a
Issue 4 fix: TJVendors Reports and Profile page is looking messed up …
deepa-g May 20, 2019
611cf14
Update default.php
manojLondhe May 20, 2019
80ecd36
Update profile.php
manojLondhe May 20, 2019
c1a1de9
Update edit.php
manojLondhe May 20, 2019
a0498dc
Update default.php
manojLondhe May 20, 2019
6c3c2e2
Update tjvendors.php
manojLondhe May 20, 2019
30b1634
Issue 4 fix: TJVendors Reports and Profile page is looking messed up …
deepa-g May 20, 2019
dd10c31
Issue 4 fix: TJVendors Reports and Profile page is looking messed up …
deepa-g May 20, 2019
a43456e
Bug #150110 fix: [Vendor-profile logo- frontend/backend]- Shows alert…
deepa-g Sep 6, 2019
69be7ec
Bug #150110 fix: [Vendor-profile logo- frontend/backend]- Shows alert…
deepa-g Sep 9, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions src/com_tjvendors/admin/views/vendor/tmpl/update.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -62,10 +62,10 @@
?>
</div>

<input type="hidden" name="jform[vendor_logo]" id="jform_vendor_logo_hidden" value="<?php echo $this->item->vendor_logo; ?>" />
<input type="hidden" name="jform[vendor_logo]" id="jform_vendor_logo_hidden" value="<?php echo htmlspecialchars($this->item->vendor_logo, ENT_COMPAT, 'UTF-8'); ?>" />
<?php if (!empty($this->item->vendor_logo)) : ?>
<div class="control-group">
<div><img src="<?php echo JUri::root() . $this->item->vendor_logo; ?>" class="span3 col-md-3 img-thumbnail pull-left marginb10 img-polaroid"></div>
<div><img src="<?php echo JUri::root(true) . htmlspecialchars($this->item->vendor_logo, ENT_COMPAT, 'UTF-8'); ?>" class="span3 col-md-3 img-thumbnail pull-left marginb10 img-polaroid"></div>
</div>
<?php endif;
?>
Expand Down
11 changes: 6 additions & 5 deletions src/com_tjvendors/site/controllers/vendor.php
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,10 +1,11 @@
<?php
/**
* @version CVS: 1.0.0
* @package Com_Tjvendors
* @author Parth Lawate <contact@techjoomla.com>
* @copyright 2016 Parth Lawate
* @license GNU General Public License version 2 or later; see LICENSE.txt
* @package TJVendors
* @subpackage com_tjvendors
*
* @author Techjoomla <extensions@techjoomla.com>
* @copyright Copyright (C) 2009 - 2019 Techjoomla. All rights reserved.
* @license http://www.gnu.org/licenses/gpl-2.0.html GNU/GPL
*/

// No direct access
Expand Down
2 changes: 1 addition & 1 deletion src/com_tjvendors/site/views/vendor/tmpl/default.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@
{
?>
<div class="controls col-sm-3 center">
<img src="<?php echo JUri::root() . $this->VendorDetail->vendor_logo; ?>" width="100%">
<img src="<?php echo JUri::root(true) . htmlspecialchars($this->VendorDetail->vendor_logo, ENT_COMPAT, 'UTF-8'); ?>" width="100%">
</div>
<?php
}
Expand Down
4 changes: 2 additions & 2 deletions src/com_tjvendors/site/views/vendor/tmpl/profile.php
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -69,7 +69,7 @@
<div class="form-group">
<div class="row">
<div class="col-xs-12 col-sm-10 col-md-7">
<img class="img-responsive" src="<?php echo JUri::root() . $this->vendor->vendor_logo; ?>">
<img class="img-responsive" src="<?php echo JUri::root() . htmlspecialchars($this->vendor->vendor_logo, ENT_COMPAT, 'UTF-8'); ?>">
</div>
</div>
</div>
Expand All @@ -96,7 +96,7 @@
</div>
</div>
</div>
<input type="hidden" name="jform[vendor_logo]" id="jform_vendor_logo_hidden" value="<?php echo $this->vendor->vendor_logo ?>" />
<input type="hidden" name="jform[vendor_logo]" id="jform_vendor_logo_hidden" value="<?php echo htmlspecialchars($this->vendor->vendor_logo, ENT_COMPAT, 'UTF-8'); ?>" />
</fieldset>
</div>
<!----Tab 1 End----->
Expand Down