https://forum.productcart.com/ Copyright (c) 2006-2013 Web Wiz Forums - All Rights Reserved. Sun, 12 Apr 2026 11:56:51 +0000 Wed, 15 Jun 2011 18:27:24 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 12.04 360 https://forum.productcart.com/RSS_post_feed.asp?TID=4546 https://forum.productcart.com/forum_images/pc_logo_50.png https://forum.productcart.com/ https://forum.productcart.com/possible-bug-with-the-recent-xss-patch_topic4546_post17789.html#17789 Author: ProductCart
Subject: 4546
Posted: 15-June-2011 at 6:27pm

We posted the updated patch.
http://www.earlyimpact.com/productcart/technical-support.asp#updates

Thank you for pointing out the issue with the way the fix was affecting the display of certain Control Panel messages.


Edited by earlyimp - 15-June-2011 at 6:28pm]]> Wed, 15 Jun 2011 18:27:24 +0000 https://forum.productcart.com/possible-bug-with-the-recent-xss-patch_topic4546_post17789.html#17789 https://forum.productcart.com/possible-bug-with-the-recent-xss-patch_topic4546_post17788.html#17788 Author: ProductCart
Subject: 4546
Posted: 15-June-2011 at 2:27pm

Hi Brett: we are looking into this. The security fix we introduced is causing the issue. We are reviewing the matter and we'll have a solution soon.]]> Wed, 15 Jun 2011 14:27:09 +0000 https://forum.productcart.com/possible-bug-with-the-recent-xss-patch_topic4546_post17788.html#17788 https://forum.productcart.com/possible-bug-with-the-recent-xss-patch_topic4546_post17784.html#17784 Author: Brett
Subject: 4546
Posted: 14-June-2011 at 10:25pm

I believe the patch included one file which was something like view message for the pcadmin folder. I tried to consolidate a customer account and the message came up like this:

The email you have chosen is already in use by another customer. If you still wish to use this e-mail for this customer account, <a href=''viewcustb.asp?key4=customeremail@address.com''>search</a> for all customers with the same e-mail address, consolidate their accounts into one using the corresponding feature (orders are moved to the consolidated account), and then remove the accounts that are no longer needed.

So the URL isn't correctly appearing. Is anyone else experiencing this error?

Edited by Brett - 14-June-2011 at 10:26pm]]> Tue, 14 Jun 2011 22:25:50 +0000 https://forum.productcart.com/possible-bug-with-the-recent-xss-patch_topic4546_post17784.html#17784