Can you please post the full:
 

<form name="form1">
    <input type="hidden" name="productid" />
    <input type="hidden" name="command" />
</form>
I'm not entirely sure I got the whole idea behind, what you had to put where.

Sorry

 I don't understand what you are trying to do? 

Added 5 minutes later:

nevermind I see it. Thank you for the report. 

Added 14 hours later:

This is strange behaviour I think:

if ($usr['isadmin'] == true)
			{
				
				$t->assign(array(
						'CATEGORY_LINK' => cot_url('shop', 'm=category'),
						'PRODUCT_LINK' => cot_url('shop', 'm=product')
					));
					
			}

and in the tpl file:

<!-- IF {CATEGORY_LINK} -->
		<li><a href="https://www.cotonti.com/{CATEGORY_LINK}">Manage Categories</a></li>
        <li><a href="https://www.cotonti.com/{PRODUCT_LINK}">Manage Products</a></li>
		<!-- ENDIF -->

and yet it not only displays the links when not logged in, but the links are incorrect. 

Added 7 hours later:

By they way for anyone interested in a shop module (with Paypal) you can check out my progress here: http://battle-box.net/dev/index.php?e=shop

You need to be logged in to see it:

username: guest

password: welcome

By the way, you don't guard the productid value (dunno how about inside the addtocart() function)- it can be potentially dangerous. You should be using cot_import() function IMO.

It is important to sanitize user input (see Validation and Messages) and make sure that unescaped strings are not used in SQL queries (I should probably write in detail about it too).

Anyhow, like I said to you the shop module is coming on nicely. Nearly all the basic features are working, including Paypal. Just working on the frontend now, adding stuff like sliders for the featured items.

Yeah you guys are completely right. I was being dumb. Thanks.

learning..

Anyway the issue is the onclick directs back to index.php with the form results like this: index.php?productid=1&command=add and I dont know why.

Also I don't see the method in form, shouldn't it be <form action="(someurl)" name="form1" method="post">? It seems like it goes as a method="get" by default. I don't know where the adding to cart happens, but if outside the plugin then the form action="" would have to point to the script where the magic happens (in your case the shopping cart plugin).

By the way, you don't guard the productid value (dunno how about inside the addtocart() function)- it can be potentially dangerous. You should be using cot_import() function IMO.

I will upload my script today for you, you will see how I solved it (without javascript).

I am trying to build a shopping cart. Categories and products are built with php and each item has an "add to cart" button. I have a single hidden form and js to submit the form. This method works really well for the shopping cart or shop.cart.php (for updating quantities or deleting items) but for some reason it doesn't work at all on shop.main.php it only redirects me to index.php?productid=1&command=add when trying to add items. I have tried everything I can think of. 

$js = 'function addtocart(pid){';
$js .= 'document.form1.productid.value=pid;';
$js .= 'document.form1.command.value="add";';
$js .= 'document.form1.submit();';
$js .= '}';

cot_rc_embed($js);


if($_REQUEST['command']=='add' && $_REQUEST['productid']>0){
		$pid=$_REQUEST['productid'];
		addtocart($pid,1);
		cot_redirect(cot_url('shop', 'm=cart', '', true));
		exit();
	}

'PRODUCT_ADD' => cot_inputbox('button', '', 'Add to Cart', array('onclick' => 'addtocart('.$rowproducts['product_id'].')'))

That is a snippet of my shop.main.php but its the only part that isn't working properly. 

<form name="form1">
	<input type="hidden" name="productid" />
    <input type="hidden" name="command" />
</form>

from the tpl.

Any help would be much appreciated! 

Luke.