<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<a class="moz-txt-link-abbreviated" href="mailto:onken@houseofdesign.de">onken@houseofdesign.de</a> wrote:
<blockquote
cite="mid:bcbd13d0ae86a8c588d01b34aa718b00@mail.houseofdesign.de"
type="cite">
<pre wrap="">On Wed, 17 Dec 2008 09:51:06 +0100, <a class="moz-txt-link-rfc2396E" href="mailto:onken@houseofdesign.de"><onken@houseofdesign.de></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi,
I want to create a shopping cart with formfu. Actually the dialog where
</pre>
</blockquote>
<pre wrap=""><!---->you
</pre>
<blockquote type="cite">
<pre wrap="">see all your items and you can update the quantity of them. This is the
only editable field. As label I use the product title. But also want to
show the price and total. Both are avaiable from the row object.
If I add an element "- name: price" it renders an input field, which is
what we all expect. But I want it to be a simple label.
My dirty workaround:
- name: price
model_config:
label: price
attrs:
style: "display: none"
Well, this works but an attacker could easily fill in the hidden form
</pre>
</blockquote>
<pre wrap=""><!---->field
</pre>
<blockquote type="cite">
<pre wrap="">and can change the price (bad!).
Is there an element I could use?
</pre>
</blockquote>
<pre wrap=""><!---->
Any ideas?
</pre>
</blockquote>
Hi,<br>
<br>
You'd normally pass the price of something to display on the webpage,
but i can't see why you'd want to accept it back (even if it is passed
back to your script(s), just ignore it?). All you need is an item id
and a quantity.<br>
<br>
Ben<br>
<br>
</body>
</html>