remove gratuitous uses of encodeHTML as well as a couple of other where it is a bug...

[mir.git] / templates-dist / admin / image.template

diff --git a/templates-dist/admin/image.template b/templates-dist/admin/image.template
index 3eb7f8e..3c71fa6 100755 (executable)
--- a/templates-dist/admin/image.template
+++ b/templates-dist/admin/image.template
@@ -32,9 +32,9 @@ function openWin(url) {
 <form enctype="multipart/form-data" method="post" action="${config.actionRoot}?module=Images&do=<if data.new>insert<else>update</if>&id=${data.id}">
        <table border="0">
 
-       <input type="hidden" name="where" value="${data.where}">
-       <input type="hidden" name="offset" value="${data.offset}">
-       <input type="hidden" name="order" value="${data.order}">
+       <input type="hidden" name="where" value="${encodeHTML(data.where)}">
+       <input type="hidden" name="offset" value="${encodeHTML(data.offset)}">
+       <input type="hidden" name="order" value="${encodeHTML(data.order)}">
        <input type="hidden" name="id" value="${data.id}">
 
        <if !data.new>
@@ -46,9 +46,9 @@ function openWin(url) {
                <img src="${config.actionRoot}?module=Images&do=getIcon&id=${data.id}" border=0></a></font></td>
                </if>
     <td valign="bottom"><font color="Silver" face="Verdana, Arial, Helvetica, sans-serif" size=1>
-               ${lang("media.created")}: ${data.webdb_create} <if data.webdb_lastchange>/ ${lang("media.changed")} ${data.webdb_lastchange}</if><br>
+               ${lang("media.created")}: ${encodeHTML(data.webdb_create)} <if data.webdb_lastchange>/ ${lang("media.changed")} ${encodeHTML(data.webdb_lastchange)}</if><br>
                <if data.is_published=="1">${lang("media.published")}: ${data.publish_date} / ${data.publish_server}${data.publish_path}<br></if>
-               ${lang("media.format")}: ${data.media_descr} / ${data.img_width}x${data.img_height} / ${data.imgformatHashdata[to_img_format]["name"]} / ${data.imglayoutHashdata[to_img_layout]["name"]} /  ${data.imgcolorHashdata[to_img_color]["name"]}<br>
+               ${lang("media.format")}: ${encodeHTML(data.media_descr)} / ${data.img_width}x${data.img_height} / ${data.imgformatHashdata[to_img_format]["name"]} / ${data.imglayoutHashdata[to_img_layout]["name"]} /  ${data.imgcolorHashdata[to_img_color]["name"]}<br>
                ${lang("media.rights")}: <b>${data.rightsHashdata[to_rights]["name"]}</b><br>
                ${lang("media.type")}: <b>${data.imgtypeHashdata[to_img_type]["name"]}</b><br>
        </td>
@@ -62,7 +62,7 @@ function openWin(url) {
     <td>
                <select name="to_media_folder">
                <list extra.mediafolderPopupData as m>
-               <option value="${m.key}" <if m.key == data.to_media_folder>selected</if>>${m.value}</option>
+               <option value="${encodeHTML(m.key)}" <if m.key == data.to_media_folder>selected</if>>${encodeHTML(m.value)}</option>
                </list>
            </select>
        </td>
@@ -71,7 +71,7 @@ function openWin(url) {
        <tr>
     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
         <B>${lang("media.description")}:</B></font></td>
-    <td><input type="text" size="40" maxlength="255" name="description" value="${data.description} ${data.human_readable_size}"></td>
+    <td><input type="text" size="40" maxlength="255" name="description" value="${encodeHTML(data.description)} ${data.human_readable_size}"></td>
        </tr>
 
        <tr>
@@ -84,20 +84,20 @@ function openWin(url) {
        <tr>
     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
         <B>${lang("media.location")}:</B></font></td>
-    <td><input type="text" size="40" maxlength="80" name="place" value="${data.place}"></td>
+    <td><input type="text" size="40" maxlength="80" name="place" value="${encodeHTML(data.place)}"></td>
        </tr>
 
        <tr>
     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
         <B>${lang("media.creator")}:</B></font></td>
     <td>
-               <input type="text" size="40" maxlength="80" name="creator" value="${data.creator}">
+               <input type="text" size="40" maxlength="80" name="creator" value="${encodeHTML(data.creator)}">
        </tr>
 
        <tr>
     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
         <B>${lang("media.keywords")}:</B></font></td>
-    <td><textarea cols="40" rows="2" name="keywords">${data.keywords}</textarea></td>
+    <td><textarea cols="40" rows="2" name="keywords">${encodeHTML(data.keywords)}</textarea></td>
        </tr>
 
        <tr>
@@ -109,7 +109,7 @@ function openWin(url) {
        <tr>
     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
         <B>${lang("media.source")}:</B></font></td>
-    <td><input type="text" size="40" maxlength="80" name="source" value="${data.source}"></td>
+    <td><input type="text" size="40" maxlength="80" name="source" value="${encodeHTML(data.source)}"></td>
        </tr>
        <if data.new>
        <tr>
@@ -142,7 +142,7 @@ function openWin(url) {
                        <B>${lang("media.title")}:<B>
                </font> </td>
                <td>
-                       <input type="text" name="title" size="40" maxlength="80" value="${data.title}">
+                       <input type="text" name="title" size="40" maxlength="80" value="${encodeHTML(data.title)}">
                </td>
                </tr>
        </if>