Assistent na nastaveni prirazky je nyni hezci a bezpecnejsi

diff --git a/assistants/set-margin.inc.php b/assistants/set-margin.inc.php
index 90f8e1928edfcf03b48639169e530a5b81194b7b..76478342298205f5a60f5956eaa917ff359dcc86 100644 (file)
--- a/assistants/set-margin.inc.php
+++ b/assistants/set-margin.inc.php
@@ -1,14 +1,17 @@
 <?php
 switch($SUBPATH[0]) {
        default: case 1:
-               echo $this->html->form("$URL/2", 'GET', array(
+               echo $this->html->form("$URL/2", 'POST', array(
                        array('margin','40','text',false,'autofocus','margin (%):'),
                        array(false,'SET-MARGIN','submit')
                ));
                break;
        case 2:
-               $margin = 1+($_GET['margin']/100);
-               $this->db->safe_query("UPDATE model SET model_price_out = CEIL(model_price_in * $margin)");
-               echo(T('Margin set to').' '.($margin*100-100).'%');
+               if(isset($_POST['margin'])) {
+                       $margin = 1+($_POST['margin']/100);
+                       $this->db->safe_query("UPDATE model SET model_price_out = CEIL(model_price_in * $margin)");
+                       $this->post_redirect_get("$URL_INTERNAL/1", T('Margin set to').' '.($margin*100-100).'%');
+               }
+               $this->post_redirect_get("$URL_INTERNAL/1","Set-margin: No value passed!", true);
                break;
 }