View Issue Details

IDProjectCategoryView StatusLast Update
0002989OXID eShop (all versions)2. ----- eShop backend (admin) -----public2012-12-10 15:35
Reportermanuel_bln Assigned To 
PriorityurgentSeveritymajorReproducibilityalways
Status closedResolutionduplicate 
Product Version4.5.0 revision 34568 
Summary0002989: shopid gets lost in forms (using $oViewConf->getHiddenSid())
Descriptionproof of concept (works in enterprise demoshop as well):
 * create a new subshop
 * Set some URL for this subshop (any random URL)
 * goto articles => categories. List is empty (which is correct)
 * submit filter form
 * list shows categories from baseshop (shopid = 1)

reason:
 oxviewconfig::mustAddShopIdToRequest() returns false.
 (in list-template $oViewConf->getHiddenSid() is called. The hidden shp-field is not rendered if mustAddShopIdToRequest returns false)

solution:
 i don't have that much time to evaluate a solution - maybe always return true on isAdmin() === true ? don't know about any side-effects there.
Steps To Reproducesee above
Additional InformationI'm afraid that this error could also affect other forms dealing with sensitive data and therefore mixes up shop-settings etc.
TagsNo tags attached.
Theme
Browser
PHP Version
Database Version

Relationships

duplicate of 0002842 resolvedvilma_liorensaityte wrong shopid in admin 

Activities

birute_meilutyte

2011-06-20 13:28

reporter   ~0004747

duplicate of 0002842