X-Git-Url: http://git.freeside.biz/gitweb/?a=blobdiff_plain;f=httemplate%2Fpref%2Fpref.html;h=44b844891d8b787fcf74fc41c2181fe49893098a;hb=d7b1a575ccef91f704b1573c431235441d52e47d;hp=de5bd827074c67fe8f44d40a4f4ff039a15eee45;hpb=c648976f0b7975f2328ebd7ba8c711fad0ca4195;p=freeside.git diff --git a/httemplate/pref/pref.html b/httemplate/pref/pref.html index de5bd8270..44b844891 100644 --- a/httemplate/pref/pref.html +++ b/httemplate/pref/pref.html @@ -57,22 +57,38 @@ Email Address
+Development +<% ntable("#cccccc",2) %> + + + Show internal package numbers: + option('show_pkgnum') ? 'CHECKED' : '' %>> + + + Show database profiling (when available): + option('show_db_profile') ? 'CHECKED' : '' %>> + + + +
+ + Vonage integration (see Click2Call) <% ntable("#cccccc",2) %> Vonage phone number - + Vonage username - + Vonage password - + @@ -91,11 +107,13 @@ Vonage integration (see Click2Call <% include('/elements/footer.html') %> <%init> +my $curuser = $FS::CurrentUser::CurrentUser; + # XSS via your own preferences? seems unlikely, but nice try anyway... -( $FS::CurrentUser::CurrentUser->option('menu_position') || 'left' ) +( $curuser->option('menu_position') || 'left' ) =~ /^(\w+)$/ or die "illegal menu_position"; my $menu_position = $1; -( $FS::CurrentUser::CurrentUser->option('email_address') ) +( $curuser->option('email_address') ) =~ /^([,\w\@.]*)$/ or die "illegal email_address"; #too late my $email_address = $1;