X-Git-Url: http://erislabs.net/gitweb/?a=blobdiff_plain;ds=sidebyside;f=templates-dist%2Fadmin%2Fmedialist.template;h=6758f47dd4688f7926e87da37c01428498011acb;hb=b824bb63090abfabe99b73f57246df760748d0f9;hp=296fb84e134a0b2e069bc8f2abcb00fbce003068;hpb=131f3ea5c219654651f48d56dfeb428dfc9b1e60;p=mir.git

diff --git a/templates-dist/admin/medialist.template b/templates-dist/admin/medialist.template
index 296fb84e..6758f47d 100755
--- a/templates-dist/admin/medialist.template
+++ b/templates-dist/admin/medialist.template
@@ -22,7 +22,7 @@
 
 	<tr>
 	<td>
-		<input type="text" size="10" maxlength="20" name="query_text" value="${data.query_text}">
+		<input type="text" size="10" maxlength="20" name="query_text" value="${encodeHTML(data.query_text)}">
 		<select name="query_field">
     		<option value="title"<if data.query_field=="title"> selected</if>>${lang("media.title")}</option>
     		<option value="creator"<if data.query_field=="creator"> selected</if>>${lang("media.creator")}</option>
@@ -40,7 +40,7 @@
 	<td>
 	<select name="query_media_folder">
  	<list extra.mediafolderPopupData as m>
-	<option value="${m.key}" <if m.key == query_media_folder>selected</if>>${m.value}</option>
+	<option value="${encodeHTML(m.key)}" <if m.key == data.query_media_folder>selected</if>>${encodeHTML(m.value)}</option>
   	</list>
    	</select>
 	</td>
@@ -59,6 +59,10 @@
 	<td><font color="#FFFFFF" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
 	<b>${lang("media.title")}</b></font></td>
     <td><font color="#FFFFFF" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
+	<b>${lang("media.format")}</b></font></td>
+    <td><font color="#FFFFFF" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
+	<b>${lang("media.size")}</b></font></td>
+    <td><font color="#FFFFFF" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
 	<b>${lang("media.mediafolder")}</b></font></td>
     <td><font color="#FFFFFF" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
 	<b>${lang("media.creator")}</b></font></td>
@@ -67,15 +71,18 @@
   <list data.contentlist as entry>
   <tr <if grey=="1"><assign grey="0">bgcolor="#dddddd" <else><assign grey="1"> </if>>
   <td>
-	  <img src="${config.docRoot}/img/${entry.big_icon}" border=0></font></td>
-  <td>${entry.title}&nbsp;
-  	  <if entry.decription><br>${entry.description}</if></td>
+  	  <a href="${config.actionRoot}?module=OtherMedia&do=getMedia&id=${entry.id}">
+	  <img src="${config.docRoot}/img/${entry.big_icon}" border=0></a></font></td>
+  <td>${encodeHTML(entry.title)}&nbsp;
+  	  <if entry.description><br>${encodeHTML(entry.description)}</if></td>
+  <td>${encodeHTML(entry.media_descr)}&nbsp;</td>
+  <td>${entry.human_readable_size}&nbsp;</td>
   <td>${data.mediafolderHashdata[entry.to_media_folder]["name"]}&nbsp;</td>
-  <td>${entry.creator}&nbsp;</td>
+  <td>${encodeHTML(entry.creator)}&nbsp;</td>
   <td><font size="1">&nbsp;
 	<if data.cid><a href="${config.actionRoot}?module=Content&do=attach&mid=${entry.id}&cid=${data.cid}">${lang("attach")}</a>
 	<else>
-	<a href="${config.actionRoot}?module=OtherMedia&do=delete&id=${entry.id}">${lang("delete")}</a>
+	<a href="${config.actionRoot}?module=OtherMedia&do=delete&id=${entry.id}&query_text=${encodeHTML(data.query_text_encoded)}&query_field=${encodeHTML(data.query_field)}&query_is_published=${data.query_is_published}&query_media_folder=${data.query_media_folder}&offset=${data.offset}">${lang("delete")}</a>
     | <a href="${config.actionRoot}?module=OtherMedia&do=edit&id=${entry.id}">${lang("edit")}</a>
 	</if>
 	</font></td>
@@ -89,10 +96,10 @@
 
 <tr><td>
 <if data.prev>
-	<a href="${config.actionRoot}?module=OtherMedia&do=list&query_text=${data.query_text_encoded}&query_field=${data.query_field}&query_is_published=${data.query_is_published}&query_media_folder=${data.query_media_folder}&offset=${data.prev}&prev=zur&uuml;ck&cid=${data.cid}">zurueck</a>&nbsp;
+	<a href="${config.actionRoot}?module=OtherMedia&do=list&query_text=${encodeHTML(data.query_text_encoded)}&query_field=${encodeHTML(data.query_field)}&query_is_published=${encodeHTML(data.query_is_published)}&query_media_folder=${encodeHTML(data.query_media_folder)}&offset=${encodeHTML(data.prev)}&prev=zur&uuml;ck&cid=${data.cid}">zurueck</a>&nbsp;
 </if>
 <if data.next>
-<a href="${config.actionRoot}?module=OtherMedia&do=list&query_text=${data.query_text_encoded}&query_field=${data.query_field}&query_is_published=${data.query_is_published}&query_media_folder=${data.query_media_folder}&offset=${data.next}&next=weiter&cid=${data.cid}">weiter</a>
+<a href="${config.actionRoot}?module=OtherMedia&do=list&query_text=${encodeHTML(data.query_text_encoded)}&query_field=${encodeHTML(data.query_field)}&query_is_published=${encodeHTML(data.query_is_published)}&query_media_folder=${encodeHTML(data.query_media_folder)}&offset=${encodeHTML(data.next)}&next=weiter&cid=${data.cid}">weiter</a>
 </if>
 </td></tr>
 <else>