diff options
Diffstat (limited to 'httemplate/edit')
| -rw-r--r-- | httemplate/edit/elements/part_svc_column.html | 2 | ||||
| -rw-r--r-- | httemplate/edit/elements/svc_Common.html | 3 | ||||
| -rwxr-xr-x | httemplate/edit/process/cust_main.cgi | 5 | ||||
| -rw-r--r-- | httemplate/edit/process/part_virtual_field.html | 3 |
4 files changed, 11 insertions, 2 deletions
diff --git a/httemplate/edit/elements/part_svc_column.html b/httemplate/edit/elements/part_svc_column.html index 1e1ff79ee..80d325e59 100644 --- a/httemplate/edit/elements/part_svc_column.html +++ b/httemplate/edit/elements/part_svc_column.html @@ -98,7 +98,7 @@ that field. <TD ROWSPAN=2 CLASS="grid"> <INPUT NAME="<% $svcdb %>__<% $field %>_label" STYLE="text-align: right" - VALUE="<% $part_svc_column->columnlabel || $def->{'label'} |h %>"> + VALUE="<% $part_svc_column->columnlabel || escapeHTML($def->{'label'}) |h %>"> </TD> <TD ROWSPAN=1 CLASS="grid"> diff --git a/httemplate/edit/elements/svc_Common.html b/httemplate/edit/elements/svc_Common.html index e1c309080..e5dc55979 100644 --- a/httemplate/edit/elements/svc_Common.html +++ b/httemplate/edit/elements/svc_Common.html @@ -227,7 +227,8 @@ $html .= $svc_x->pvf($field)->widget( 'HTML', 'edit', - $svc_x->getfield($field) + $svc_x->getfield($field), + 'TH' ); } } diff --git a/httemplate/edit/process/cust_main.cgi b/httemplate/edit/process/cust_main.cgi index e3fa4e6f8..d277e17b1 100755 --- a/httemplate/edit/process/cust_main.cgi +++ b/httemplate/edit/process/cust_main.cgi @@ -113,6 +113,11 @@ my $new = new FS::cust_main ( { $new->invoice_noemail( ($cgi->param('invoice_email') eq 'Y') ? '' : 'Y' ); +# add any virtual fields to the new cust_main record +foreach ($new->virtual_fields) { + $new->setfield($_, scalar($cgi->param($_))); +} + if ( $duplicate_of ) { # then negate all changes to the customer; the only change we should # make is to order a package, if requested diff --git a/httemplate/edit/process/part_virtual_field.html b/httemplate/edit/process/part_virtual_field.html index e734d9616..6a8008db7 100644 --- a/httemplate/edit/process/part_virtual_field.html +++ b/httemplate/edit/process/part_virtual_field.html @@ -42,6 +42,9 @@ my $act = 'add'; +## make cgi->param("name") lowercase +$cgi->param('name' => lc $cgi->param('name')); + die "access denied" unless $FS::CurrentUser::CurrentUser->access_right('Configuration'); |