RT# 80869 Harden process payment screen against Edge browser bug

[freeside.git] / httemplate / elements / select-month_year.html

diff --git a/httemplate/elements/select-month_year.html b/httemplate/elements/select-month_year.html
index 2866960..406c13b 100644 (file)
--- a/httemplate/elements/select-month_year.html
+++ b/httemplate/elements/select-month_year.html
@@ -1,5 +1,22 @@
-<%
+<SELECT NAME="<% $prefix %>_month" SIZE="1" <% $disabled%>>
 
+<% $empty ? '<OPTION VALUE="">' : '' %>
+% foreach ( 1 .. 12 ) { 
+
+   <OPTION<% $_ == $mon ? ' SELECTED' : '' %> VALUE="<% sprintf('%02d', $_) %>"><% $mon[$_-1] %></OPTION>
+% } 
+
+</SELECT>/<SELECT NAME="<% $prefix %>_year" SIZE="1" <% $disabled%>>
+
+<% $empty ? '<OPTION VALUE="">' : '' %>
+% for ( $start_year .. $end_year ) { 
+
+   <OPTION<% $_ == $year ? ' SELECTED' : '' %> VALUE="<% $_ %>"><% $_ %></OPTION>
+% } 
+
+</SELECT>
+
+<%init>
   my %opt = @_;
 
   my $prefix = $opt{'prefix'} || '';
@@ -11,16 +28,18 @@
   my @mon;
   if ( $opt{'show_month_abbr'} ) {
     @mon = qw(Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec);
+    # XXX: localization
   } else {
-    @mon = ( 1 .. 12 );
+    @mon = ( ( map "0$_", 1 .. 9 ), 10 .. 12 ), 
   }
 
   my $date = $opt{'selected_date'} || '';
   $date = '' if $date eq '-';
-  #$date ||= '01-2000' unless $empty;
 
   my $mon  = $opt{'selected_mon'}  || 0;
   my $year = $opt{'selected_year'} || 0;
+
+  #false laziness w/cust_payby->paydate_mon_year
   if ( $date ) {
     if ( $date  =~ /^(\d{4})-(\d{1,2})-\d{1,2}$/ ) { #PostgreSQL date format
       ( $mon, $year ) = ( $2, $1 );
@@ -37,23 +56,4 @@
   }
   $start_year = $year if $start_year > $year && $year > 0;
 
-%>
-
-<SELECT NAME="<%= $prefix %>_month" SIZE="1" <%= $disabled%>>
-
-<%= $empty ? '<OPTION VALUE="">' : '' %>
-
-<% foreach ( 1 .. 12 ) { %>
-   <OPTION<%= $_ == $mon ? ' SELECTED' : '' %> VALUE="<%= $_ %>"><%= $mon[$_-1] %>
-<% } %>
-
-</SELECT>/<SELECT NAME="<%= $prefix %>_year" SIZE="1" <%= $disabled%>>
-
-<%= $empty ? '<OPTION VALUE="">' : '' %>
-
-<% for ( $start_year .. $end_year ) { %>
-   <OPTION<%= $_ == $year ? ' SELECTED' : '' %> VALUE="<%= $_ %>"><%= $_ %>
-<% } %>
-
-</SELECT>
-
+</%init>