diff options
author | Christopher Burger <burgerc@freeside.biz> | 2018-10-10 12:53:53 -0400 |
---|---|---|
committer | Christopher Burger <burgerc@freeside.biz> | 2018-10-10 12:53:53 -0400 |
commit | 2a82381a976c22f2c0d85645e8b327713ddcbd88 (patch) | |
tree | 43fd5de23281639139b6b705490b04595f0bb1ac /fs_selfservice | |
parent | 29445ff3f69c32ba0f836f3c5bbaf946c154b360 (diff) |
RT# 39340 - created access to payment only via ip address, fixes security by creating a seperate session
Diffstat (limited to 'fs_selfservice')
-rw-r--r-- | fs_selfservice/FS-SelfService/SelfService/XMLRPC.pm | 1 | ||||
-rw-r--r-- | fs_selfservice/FS-SelfService/cgi/change_pay.html | 2 | ||||
-rwxr-xr-x | fs_selfservice/FS-SelfService/cgi/selfservice.cgi | 6 |
3 files changed, 7 insertions, 2 deletions
diff --git a/fs_selfservice/FS-SelfService/SelfService/XMLRPC.pm b/fs_selfservice/FS-SelfService/SelfService/XMLRPC.pm index 506dce1..58ce6a8 100644 --- a/fs_selfservice/FS-SelfService/SelfService/XMLRPC.pm +++ b/fs_selfservice/FS-SelfService/SelfService/XMLRPC.pm @@ -45,6 +45,7 @@ our %typefix = ( 'invoice_pdf' => { 'invoice_pdf' => 'base64', }, 'legacy_invoice_pdf' => { 'invoice_pdf' => 'base64', }, 'skin_info' => \%typefix_skin_info, + 'payment_only_skin_info' => \%typefix_skin_info, 'login_info' => \%typefix_skin_info, 'logout' => \%typefix_skin_info, 'access_info' => \%typefix_skin_info, diff --git a/fs_selfservice/FS-SelfService/cgi/change_pay.html b/fs_selfservice/FS-SelfService/cgi/change_pay.html index f90f6d9..bd64907 100644 --- a/fs_selfservice/FS-SelfService/cgi/change_pay.html +++ b/fs_selfservice/FS-SelfService/cgi/change_pay.html @@ -68,7 +68,7 @@ selected_layer => $payby, # form_name => 'dummy', # form_action => 'dummy.cgi', - layer_callback => sub { my $layer = shift; return '<TABLE BGCOLOR="#cccccc">'.$paybychecked{$layer}.qq!<INPUT TYPE="hidden" NAME="payby" VALUE="$layer">$tail!; }, + layer_callback => sub { my $layer = shift; use MyLog; use Data::Dumper; MyLog->mylog("my layer $layer\n"); return '<TABLE BGCOLOR="#cccccc">'.$paybychecked{$layer}.qq!<INPUT TYPE="hidden" NAME="payby" VALUE="$layer">$tail!; }, )->html; %> diff --git a/fs_selfservice/FS-SelfService/cgi/selfservice.cgi b/fs_selfservice/FS-SelfService/cgi/selfservice.cgi index 3dc69e1..999b812 100755 --- a/fs_selfservice/FS-SelfService/cgi/selfservice.cgi +++ b/fs_selfservice/FS-SelfService/cgi/selfservice.cgi @@ -284,7 +284,11 @@ sub change_bill { }; } sub change_ship { change_bill(@_); } -sub change_pay { change_bill(@_); } +sub change_pay { + my @payby = ('CARD', 'CHEK', 'DCHK'); + use MyLog; use Data::Dumper; MyLog->mylog("my change pay at\n".Dumper(@_)); + change_bill(@_); +} sub change_creditcard_pay { change_bill('CARD'); } sub change_check_pay { change_bill('CHEK'); } |