[ic] Re: Report errors

Jeff Fearn jefffearn at gmail.com
Fri Jan 21 01:57:54 EST 2005


On Fri, 21 Jan 2005 14:47:33 +1000, Jeff Fearn <jefffearn at gmail.com> wrote:
> On Thu, 20 Jan 2005 14:33:58 +1000, Jeff Fearn <jefffearn at gmail.com> wrote:
> > HI, when I try and run the reports that come with IC, Order Status and
> > Products to edit, I get a bunch of "    [item-data orderline ]" printed
> > out.
> >
> > Any idea what causes these tags not to be work? I have nnot changed
> > anything in reports.
> 
> It appears that the admin/report.html page is stuffed. Reports
> generated from this page will have 8 columns displayed and if you
> don't define the fields you want it will display " [item-data
> orderline ]".
> 
> Also if you load a previously defined report the select boxes are not
> set correctly.
> 
> I searched the archive and could find no resolution.
> 
> I'm running 5.2.0, has anyone got the admin/reports interface working?

This all appears to be due to the use of $Value in report.html, HTML
is embedded in $Value which is escaped causing the HTML to be
generated incorrectly.

eg:
		$Values->{"table$i"} = "<OPTION VALUE=''>--select table--</OPTION>";
		$Values->{"edit$i"} = "<OPTION VALUE=''>--select table--</OPTION>";
		$Values->{"column$i"} = "<OPTION VALUE=''>--select column--</OPTION>";
		$Values->{"key$i"} = "<OPTION VALUE=''>--key if applicable--</OPTION>";

Generates:

	&lt;OPTION VALUE=''>--select table--&lt;/OPTION>&lt;OPTION SELECTED
VALUE='inventory'>inventory&lt;/OPTION>

Switching to $Scratch & [scratch fixes the outoput, however the docs
say that $Value is used for security reasons so I am a bit worried
this might affect security.

Is it safe to switch to $Scratch? If not I will have to move the HTML
tags and apply them in code.

Jeff.


More information about the interchange-users mailing list