Contributions

This is a security update to this package. All versions prior to this v3.6 do not properly sanitize input and are vulnerable to XSS attacks.

v3.6 properly adheres to osCommerce input sanitizing standards and patches the vulnerability.

*** If you are using any version of this mod prior to v3.6, you are vulnerable to XSS attacks through the printable catalog module. ***

Printable catalog is a great add-on, but I also needed to show the product description.

Because space is limited and to avoid a messy catalog, this fix retrieves just the first 400 characters of your description, and it get's rid of all the html code, but the <br> and <b> tags just to accomodate proper formatting.

If you want to modify the character length just go to line 852.

To install, just add this file to your catalog directory, providing that you are already using this contribution.

1054 - Unknown column 'p.products_id' in 'on clause'

This package will solve this problem.

Full included.

This is a full package with the pagination (items per page) issue fixed. I also updated the read me file to explain the 2 types of catalog display.

Hope this helps someone,

Ed

PS. Very easy to install and get operational.

Just added the sql fix and a few admin on/off options to upgrade just copy over catalog/ files (2) and run the sql remove script then run the install sql script to upgrade this module.

This should be the last one for me hopefully

These lines did not work for me


INSERT INTO configuration (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, last_modified, date_added, set_function) VALUES ('Printable Catalog-Number of Page Breaks Displayed', 'PRODUCT_LIST_PAGEBREAK_NUMBERS_PERPAGE', '10', 'How page breaks numbers to display?', '899', '2', now(), now(), 'tep_cfg_select_option(array('show', 'hide'),');
INSERT INTO configuration (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, last_modified, date_added, set_function) VALUES ('Printable Catalog-Results Per Page', 'PRODUCT_LIST_CATALOG_PERPAGE', '10', 'How many products do you want to list per page?', '899', '3', now(), now(), 'tep_cfg_select_option(array('show', 'hide'),');
INSERT INTO configuration (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, last_modified, date_added, set_function) VALUES ('Printable Catalog-Length of the Description Text', 'PRODUCT_LIST_DESCRIPTION_LENGTH', '400', 'How many characters in the description to display?', '899', '4', now(), now(), 'tep_cfg_select_option(array('show', 'hide'),');




changed to

INSERT INTO configuration (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, last_modified, date_added) VALUES ('Printable Catalog-Number of Page Breaks Displayed', 'PRODUCT_LIST_PAGEBREAK_NUMBERS_PERPAGE', '10', 'How page breaks numbers to display?', '899', '2', now(), now());
INSERT INTO configuration (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, last_modified, date_added) VALUES ('Printable Catalog-Results Per Page', 'PRODUCT_LIST_CATALOG_PERPAGE', '10', 'How many products do you want to list per page?', '899', '3', now(), now());
INSERT INTO configuration (configuration_title, configuration_key, configuration_value, configuration_description, configuration_group_id, sort_order, last_modified, date_added) VALUES ('Printable Catalog-Length of the Description Text', 'PRODUCT_LIST_DESCRIPTION_LENGTH', '400', 'How many characters in the description to display?', '899', '4', now(), now());

There was something wrong in the controls trough admin, those controls where there had to be a numeric value, had a true false value.
So it wasn't possible to change the listingnumber trough the admin interface.
To fix:

replace for the three listing options

'tep_cfg_select_option(array('show', 'hide'),');

by

NULL, NULL);

Or use the sql file included(but backup database before using this file)

Added Format changes and options for image in Catalog (full mode) , Fixed cPath links so categories are also clickable and fixed sql query for added tax

Fixed the sql query..to allowed the display with tax.

Added Currency on/off option and made it so if show tax is enabled it then works in the printable catalog.

Printable Catalog V3.0 MS2

------------
WHAT IS IT?
------------

This will allow your clients to print a catalog from your site that will have:
image, category, name, model, upc(if you have add-on), weight, quantity, and price
with a currency selection pull down for customer convenience.

You can set the number of products listed before your page break kicks in.
You can sort by category, name, model, upc, weight, quantity, and price.
All fields will be turned on or off by the admin section:
admin->configuration->Product Listing
Turning to 0 will make sure the column for that heading does not show up.
Turning to greater than 1 will make it so the column for that heading does show up.

You can also set the number of products that are displayed per page break
look at line 243 in the catalog/catalog_products_with_images.php and adjust as needed.


PS. Donations accepted ........whats $5/$10 donation going to hurt when you can save so much $$$$ on catalog printing costs.