Re: Error when trying to process...

This message was sent from: Features
http://forums.oscommerce.com/viewtopic.php?p=228128#228128
----------------------------------------------------------------

[quote="coffman"]Has anyone figured out the following:

[quote="phatweb"]I got the module loaded right and when I went to enter 4111 1111 1111 1111 as a test card and buy an item in test mode.. I get this:

Credit Card Error! 
 
 The first four digits of the number entered are: <br>If that number is correct, we do not accept that type of credit card.<br>If it is wrong, please try again. 
 
 
Same thing in live mode using a real card... any ideas?[/quote]

I can see that osCommerce is converting the < and > characters to &lt; and &gt;, but am not sure why..

Help..[/quote]

So it looks like the checkout_payment.php file is scrubbing the html characters using the function tep_output_string_protected.  Changing it to tep_output_string($string,false,false) fixes it, but I am not sure if this is the right answer.  Is there a real security reason for this function?  I would guess that someone thought so.   Is there any way to do some formatting within these strings?  Or do all the html tags need to be removed from the defined TEXT variables for this module...


Thanks for any input...