[ic] Search parameters in tutorial

[msquared]

I've been playing with the tutorial (which is very informative, I might
add), and came across a problem.

I set up the search box on the tutorial site as per the instructions in
the tutorial:

  http://developer.akopia.com/cgi-bin/ic/dev/iccattut_50.html

However, it seems to search every field in the product table, not just the
ones that are listed.

It didn't seem to matter what I changed the sf (search field) to in the
[set testname][/set] tags.  I assume that sets a server-side session
variable, which is then referenced by the hidden form field mv_profile?


As a side issue, it seems that we can add interchange tags to user
comments on the tutorial.  You'll note that I made three tries at
indicating some interchange tags in the user comments before I finally got
it right.  :-)

Is that a potential security risk?


             2
Regards, /|/|
        /   | (MSquared)
-- 
___________________________________________
M Squared  <msquared@digitalwizards.com.au>
Product development
Digital Wizards
http://www.digitalwizards.com.au