From b96629eb08231f78f334f78c0bd6c277c60844fa Mon Sep 17 00:00:00 2001 From: ivan Date: Mon, 8 Sep 2008 02:47:22 +0000 Subject: add package invoice details & comments, RT#3810 --- httemplate/pref/pref-process.html | 2 +- httemplate/pref/pref.html | 24 +++++++++++++++++++----- 2 files changed, 20 insertions(+), 6 deletions(-) (limited to 'httemplate/pref') diff --git a/httemplate/pref/pref-process.html b/httemplate/pref/pref-process.html index 25f30e9a9..09eb71a7e 100644 --- a/httemplate/pref/pref-process.html +++ b/httemplate/pref/pref-process.html @@ -30,7 +30,7 @@ % my %param = $access_user->options; % % #XXX autogen -% my @paramlist = qw( menu_position +% my @paramlist = qw( menu_position show_pkgnum % email_address % vonage-fromnumber vonage-username vonage-password % height width availHeight availWidth colorDepth diff --git a/httemplate/pref/pref.html b/httemplate/pref/pref.html index de5bd8270..4007bb9f1 100644 --- a/httemplate/pref/pref.html +++ b/httemplate/pref/pref.html @@ -57,22 +57,34 @@ Email Address
+Development +<% ntable("#cccccc",2) %> + + + Show internal package numbers: + option('show_pkgnum') ? 'CHECKED' : '' %>> + + + +
+ + Vonage integration (see Click2Call) <% ntable("#cccccc",2) %> Vonage phone number - + Vonage username - + Vonage password - + @@ -91,11 +103,13 @@ Vonage integration (see Click2Call <% include('/elements/footer.html') %> <%init> +my $curuser = $FS::CurrentUser::CurrentUser; + # XSS via your own preferences? seems unlikely, but nice try anyway... -( $FS::CurrentUser::CurrentUser->option('menu_position') || 'left' ) +( $curuser->option('menu_position') || 'left' ) =~ /^(\w+)$/ or die "illegal menu_position"; my $menu_position = $1; -( $FS::CurrentUser::CurrentUser->option('email_address') ) +( $curuser->option('email_address') ) =~ /^([,\w\@.]*)$/ or die "illegal email_address"; #too late my $email_address = $1; -- cgit v1.2.1