X-Git-Url: http://erislabs.net/gitweb/?a=blobdiff_plain;f=templates-dist%2Fadmin%2Fcommentlist.template;h=c62b14ba20240a52af558f377e0b339e0e8d488e;hb=b824bb63090abfabe99b73f57246df760748d0f9;hp=92b94069e2f709d03241bf2fcdf52506f6c8846d;hpb=fe89ceb73abdb412c01ecec4fbefcc3833ece9e0;p=mir.git

diff --git a/templates-dist/admin/commentlist.template b/templates-dist/admin/commentlist.template
index 92b94069..c62b14ba 100755
--- a/templates-dist/admin/commentlist.template
+++ b/templates-dist/admin/commentlist.template
@@ -15,8 +15,7 @@
         <form method="post" action="${config.actionRoot}">
 	<input type="hidden" name="module" value="Comment">
 	<input type="hidden" name="do" value="list">
-	<input type="hidden" name="offset" value="${data.offset}">
-	<input type="text" size="10" maxlength="20" name="query_text" value="${data.query_text}">
+	<input type="text" size="10" maxlength="20" name="query_text" value="${encodeHTML(data.query_text)}">
 	<select name="query_field">
     <option value="title"<if data.query_field=="title"> selected</if>>${lang("comment.title")}</option>
     <option value="creator"<if data.query_field=="creator"> selected</if>>${lang("comment.creator")}</option>
@@ -38,8 +37,8 @@
 
   <tr class="head">
   	<td><p class="head">${lang("comment.date")}</p></td>
-		<td><p class="head">${lang("comment.title")}<br>${lang("comment.creator")}</p></td>
-    <td><p class="head">${lang("comment.text")}</p></td>
+		<td><p class="head">${lang("comment.title")}/ ${lang("comment.creator")}<br>
+					${lang("comment.text")}</p></td>
     <td><p class="head">${lang("comment.article")}</P></td>
   </tr>
 
@@ -48,45 +47,45 @@
   <list data.contentlist as entry>
   <tr <if grey=="1"><assign grey="0">class="list1"<else><assign grey="1">class="list2"</if>>
 
-		<td>${entry.date_formatted}<br>
+		<td>${entry.webdb_create_short}<br>
   	<if entry.is_published=="0"><font color="Brown">V</font><else>-</if>
 		</td>
 
 		<td>
-			<b>${entry.title}</b><br>${entry.creator}
+			<if entry.title><b>${encodeHTML(entry.title)}</b><br></if>
+			<if entry.creator>Von: ${encodeHTML(entry.creator)}<br></if>
+			<font size="-1">${encodeHTML(entry.description)}</font>
+			<if entry.main_url><br>URL: ${encodeHTML(entry.main_url)}</if>
+			<br><a href="${config.actionRoot}?module=Comment&do=edit&order=${encodeHTML(data.order)}&offset=${data.offset}&id=${entry.id}">${lang("edit")}</a>
 		</td>
 
-		<td>
-			<font size="-1">${entry.description}</font>
-			<a href="${config.actionRoot}?module=Comment&do=edit&order=${data.order}&offset=${data.offset}&id=${entry.id}">${lang("edit")}</a>
-		</td>
 
 		<td>
 				${data.articleHash[entry.to_media]["title"]}<br>
 				<a href="${config.actionRoot}?module=Content&do=edit&id=${data.articleHash[entry.to_media]["id"]}">
 				edit</a> |
-				<a href="${config.producerDocRoot}${data.articleHash[entry.to_media]["publish_path"]}${data.articleHash[entry.to_media]["id"]}.shtml">
+				<a href="${config.productionHost}${config.producerDocRoot}${data.articleHash[entry.to_media]["publish_path"]}${data.articleHash[entry.to_media]["id"]}.shtml">
 				view</a>
 		</td>
 
-		<td><font size="1">&nbsp;<a href="${config.actionRoot}?module=Comment&do=delete&id=${entry.id}">${lang("delete")}</a>
+		<td><font size="1">&nbsp;<a href="${config.actionRoot}?module=Comment&do=delete&id=${entry.id}&query_text=${encodeHTML(data.query_text_encoded)}&query_field=${encodeHTML(data.query_field)}&query_is_published=${data.query_is_published}&query_media_folder=${data.query_media_folder}&offset=${data.offset}&order=${data.order}">${lang("delete")}</a>
 			</font></td>
 
 	</tr>
   </list>
 
   <tr>
-    <td colspan="4" bgcolor="#006600"><font color="#ffffff">${data.count} ${lang("records")}
+    <td colspan="3" bgcolor="#006600"><font color="#ffffff">${encodeHTML(data.count)} ${lang("records")}
       / ${lang("show_from_to", data.from, data.to)}</font></td>
     <td>&nbsp;</td>
   </tr>
 <tr><td>
 
 <if data.prev>
-<a href="${config.actionRoot}?module=Comment&do=list&order=${data.order}&query_text=${data.query_text_encoded}&query_field=${data.query_field}&query_is_published=${data.query_is_published}&query_media_folder=${data.query_media_folder}&offset=${data.prev}&prev=zur&uuml;ck">zurueck</a>&nbsp;
+<a href="${config.actionRoot}?module=Comment&do=list&order=${encodeHTML(data.order)}&query_text=${encodeHTML(data.query_text_encoded)}&query_field=${encodeHTML(data.query_field)}&query_is_published=${encodeHTML(data.query_is_published)}&query_media_folder=${data.query_media_folder}&offset=${data.prev}&prev=zur&uuml;ck">zurueck</a>&nbsp;
 </if>
 <if data.next>
-<a href="${config.actionRoot}?module=Comment&do=list&order=${data.order}&query_text=${data.query_text_encoded}&query_field=${data.query_field}&query_is_published=${data.query_is_published}&query_media_folder=${data.query_media_folder}&offset=${data.next}&next=weiter">weiter</a>
+<a href="${config.actionRoot}?module=Comment&do=list&order=${encodeHTML(data.order)}&query_text=${encodeHTML(data.query_text_encoded)}&query_field=${encodeHTML(data.query_field)}&query_is_published=${data.query_is_published}&query_media_folder=${data.query_media_folder}&offset=${data.next}&next=weiter">weiter</a>
 </if>
 </td></tr>
 <else>