Hello,

I found an error with ajax inPlaceEditor on list example. When you clic to open editor and you valid, the serviceEventHandler refuse the modifiction for security reason :
---------
2009-05-12 16:44:48,793 (http-0.0.0.0-8444-6) [ServiceEventHandler.java:406:ERROR] =============== Found URL parameter [exampleId] passed to secure (https) .....
---------
I do some modification on inPlaceEditor to put exempleId and other field not on url parameter but on hidden form field :

------------

<form class="inplaceeditor-form" method="post" id="exampleName_7-inplaceeditor"><input value="EXST_IN_DESIGN" name="statusId" type="hidden"><input value="10007" name="exampleId" type="hidden"><input class="editor_field" 
name="exampleName" size="40" type="text"><input class="editor_ok_button" value="ok" type="submit"> <input class="editor_cancel_button" value="cancel" type="submit"></form><span style="background-color: rgb(255, 255, 153); display: none;" 
title="Click to edit" id="exampleName_7" class="tabletext false">e</span>
<script language="JavaScript" type="text/javascript">
ajaxInPlaceEditDisplayField('exampleName_7', '/example/control/updateExample', 
{paramName: 'exampleName', fieldName1: 'statusId', fieldValue1: 
'EXST_IN_DESIGN', fieldName2: 'exampleId', fieldValue2: '10007', cancelControl: 
'button', htmlResponse: false, savingText: 'Updating...', textBetweenControls: 
' ', updateAfterRequestCall: true, rows: '1', cols: '40'});
</script>
---------

But when submission, the security problem already exists :( . Somebody can explain me how correct the problem, i don't understand really security URL and I have some difficult to create a good correction.

cheers,

Nicolas

:
--
Nicolas MALIN
Consultant
Tél : 06.17.66.40.06
Site projet : http://www.neogia.org/
-------
Société LibrenBerry
Tél : 02.48.02.56.12
Site : http://www.librenberry.net/

Reply via email to