Get Parameter Plus Row Filtering Logic Operator

  • Resolved frankleeceo

    (@frankleeceo)


    8 years, 10 months ago

    Hello Tobias, thank you for the awesome extension. I understand that there are character sanitations with the Get Parameter extension, however the && logic operators do not get passed even after adding the & symbol as mentioned in the other threads.

    Is there any lines of code that I could add into the plugin to pass through the logic operators available in the row filter?

    Thank you for the help!
    Frank

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author Tobias Bäthge

    (@tobiasbg)

    8 years, 10 months ago

    Hi,

    thanks for your post, and sorry for the trouble.

    Could you clarify which modifications you made to the files? Thanks!
    It might be necessary to also allow the semicolon ;, as a & in a URL usually gets encoded as &.

    Regards,
    Tobias

    Thread Starter frankleeceo

    (@frankleeceo)

    8 years, 10 months ago

    Hello, no trouble at all. Thank you for the help!

    I edited the file tablepress-shortcode-filter-get-parameter.php

    $filter_term = preg_replace( ‘#[^a-z0-9 &;]#i’, ”, $filter_term );

    I then tested the get parameter URL with parameters like

    https://example.net/test/?table_filter=1&&b
    https://example.net/test/?table_filter=1&&b

    It appears that only the string before the symbols are accepted, and the && and anything following is completely disregarded.

    Thank you!

    Plugin Author Tobias Bäthge

    (@tobiasbg)

    8 years, 10 months ago

    Hi,

    ah, now I see what’s happening. The problem here is that the & character in a URL has a special meaning. It’s the separator between multiple query variables in the URL.

    We might therefore have to “url encode” it, so that it’s not recognized as a & in the URL.
    For that, please try again with
    https://example.net/test/?table_filter=1%26%26b

    This might mean that you have to allow the % as well, and it might be necessary to add a line like
    $filter_term = urldecode( $filter_term );
    after that preg_replace line.

    Regards,
    Tobias

    Thread Starter frankleeceo

    (@frankleeceo)

    8 years, 10 months ago

    I have tested the solution. It works as expected, thank you! You are the best!

    Plugin Author Tobias Bäthge

    (@tobiasbg)

    8 years, 10 months ago

    Hi,

    no problem, you are very welcome! 🙂 Good to hear that this helped!

    Best wishes,
    Tobias

    P.S.: In case you haven’t, please rate TablePress here in the plugin directory. Thanks!

Viewing 5 replies - 1 through 5 (of 5 total)

The topic ‘Get Parameter Plus Row Filtering Logic Operator’ is closed to new replies.