From: Thomas Mudrunka <tomas@mudrunka.cz>
Date: Wed, 14 Dec 2011 04:29:11 +0000 (+0100)
Subject: Assistent na nastaveni prirazky je nyni hezci a bezpecnejsi
X-Git-Url: https://git.harvie.cz/?a=commitdiff_plain;h=19cbf1cb4937423b899c110a020c3399f4e5032e;p=mirrors%2FSokoMan.git

Assistent na nastaveni prirazky je nyni hezci a bezpecnejsi
---

diff --git a/assistants/set-margin.inc.php b/assistants/set-margin.inc.php
index 90f8e19..7647834 100644
--- a/assistants/set-margin.inc.php
+++ b/assistants/set-margin.inc.php
@@ -1,14 +1,17 @@
 <?php
 switch($SUBPATH[0]) {
 	default: case 1:
-		echo $this->html->form("$URL/2", 'GET', array(
+		echo $this->html->form("$URL/2", 'POST', array(
 			array('margin','40','text',false,'autofocus','margin (%):'),
 			array(false,'SET-MARGIN','submit')
 		));
 		break;
 	case 2:
-		$margin = 1+($_GET['margin']/100);
-		$this->db->safe_query("UPDATE model SET model_price_out = CEIL(model_price_in * $margin)");
-		echo(T('Margin set to').' '.($margin*100-100).'%');
+		if(isset($_POST['margin'])) {
+			$margin = 1+($_POST['margin']/100);
+			$this->db->safe_query("UPDATE model SET model_price_out = CEIL(model_price_in * $margin)");
+			$this->post_redirect_get("$URL_INTERNAL/1", T('Margin set to').' '.($margin*100-100).'%');
+		}
+		$this->post_redirect_get("$URL_INTERNAL/1","Set-margin: No value passed!", true);
 		break;
 }