0006706: Attribut Filters with ampersand

ID	Project	Category	View Status	Date Submitted	Last Update

0006706	OXID eShop (all versions)	1.01. Products (product, categories, manufacturer, promotions etc.)	public	2017-10-11 11:06	2017-11-24 10:49

Reporter	stroebjo	Assigned To
Priority	normal	Severity	minor	Reproducibility	always
Status	closed	Resolution	unable to reproduce
Product Version	4.10.5 / 5.3.5

Summary	0006706: Attribut Filters with ampersand
Description	If values are Added to an Attribute Object they are escaped with htmlspecialchars (see http://docu.oxid-esales.com/CE/sourcecodedocumentation/4.10.5/oxattribute_8php_source.html#l00213). If an attribute value has an "&" this get's escaped to "%26amp%3B", und following that no match for the selected filter is found, when the filter is executed in oxArticleList::_getFilterSql().
Steps To Reproduce	- Add new attribute - Assign attribute to product and set a value containing and "&" - Connect the attribute to an category - Select filter in the frontend - No article matching the attribute is shown.
Tags	No tags attached.
Attached Files	Bug_6706.JPG (62,482 bytes) Bug_6706.JPG (62,482 bytes)

Theme	Flow
Browser	All
PHP Version	5.6
Database Version	Not defined

stroebjo 2017-10-18 10:22 reporter ~0012243 Last edited: 2017-10-18 10:51	Since the ticket is now acknowledged, can you provide any form of timeframe/milestone in which this issue will be resolved? I have a customer which faces the problem, and I would like to know how to move forward on this. Thanks!

QA 2017-11-24 09:52 administrator ~0012287	In the current demoshop version 4.10.6 it is not reproducable. Create a new attribute in the demo shop "Lieferumfang". Assign attribute to the product "Kite RRD PASSION 2010" with value "Kite & Tasche". Subsequently assign to the attribute the category "Lieferumfang". In frontend category Kites select atribute filter and the article that matches the attribute is displayed. (see screenshot above).