  |
1 | 1 | | <?php |
| |
2 | 2 | | /* |
 |
3 | | - | $Id: account_newsletters.php 1739 2007-12-20 00:52:16Z hpdl $ |
| |
| 3 | + | $Id: account_newsletters.php 1843 2008-12-12 13:32:10Z hpdl $ |
|
4 | 4 | | |
| |
5 | 5 | | osCommerce, Open Source E-Commerce Solutions |
| |
6 | 6 | | http://www.oscommerce.com |
| |
7 | 7 | | |
|
8 | | - | Copyright (c) 2003 osCommerce |
| |
| 8 | + | Copyright (c) 2008 osCommerce |
|
9 | 9 | | |
| |
10 | 10 | | Released under the GNU General Public License |
| |
11 | 11 | | */ |
| |
|
|
 |
… |
|
23 | 23 | | $newsletter_query = tep_db_query("select customers_newsletter from " . TABLE_CUSTOMERS . " where customers_id = '" . (int)$customer_id . "'"); |
| |
24 | 24 | | $newsletter = tep_db_fetch_array($newsletter_query); |
| |
25 | 25 | | |
|
26 | | - | if (isset($HTTP_POST_VARS['action']) && ($HTTP_POST_VARS['action'] == 'process')) { |
| |
| 26 | + | if (isset($HTTP_POST_VARS['action']) && ($HTTP_POST_VARS['action'] == 'process') && isset($HTTP_POST_VARS['formid']) && ($HTTP_POST_VARS['formid'] == $sessiontoken)) { |
|
27 | 27 | | if (isset($HTTP_POST_VARS['newsletter_general']) && is_numeric($HTTP_POST_VARS['newsletter_general'])) { |
| |
28 | 28 | | $newsletter_general = tep_db_prepare_input($HTTP_POST_VARS['newsletter_general']); |
| |
29 | 29 | | } else { |
| |
|
|
|
… |
|
79 | 79 | | <!-- left_navigation_eof //--> |
| |
80 | 80 | | </table></td> |
| |
81 | 81 | | <!-- body_text //--> |
|
82 | | - | <td width="100%" valign="top"><?php echo tep_draw_form('account_newsletter', tep_href_link(FILENAME_ACCOUNT_NEWSLETTERS, '', 'SSL')) . tep_draw_hidden_field('action', 'process'); ?><table border="0" width="100%" cellspacing="0" cellpadding="0"> |
| |
| 82 | + | <td width="100%" valign="top"><?php echo tep_draw_form('account_newsletter', tep_href_link(FILENAME_ACCOUNT_NEWSLETTERS, '', 'SSL'), 'post', '', true) . tep_draw_hidden_field('action', 'process'); ?><table border="0" width="100%" cellspacing="0" cellpadding="0"> |
|
83 | 83 | | <tr> |
| |
84 | 84 | | <td><table border="0" width="100%" cellspacing="0" cellpadding="0"> |
| |
85 | 85 | | <tr> |