X-Git-Url: http://erislabs.net/gitweb/?a=blobdiff_plain;f=templates-dist%2Fadmin%2Fcommentlist.template;h=c62b14ba20240a52af558f377e0b339e0e8d488e;hb=b824bb63090abfabe99b73f57246df760748d0f9;hp=cc5a45b9934898b3cb4f703b48916ff15bdb9653;hpb=f530616e74eb46098ebb8379371c27aba23d21e0;p=mir.git

diff --git a/templates-dist/admin/commentlist.template b/templates-dist/admin/commentlist.template
index cc5a45b9..c62b14ba 100755
--- a/templates-dist/admin/commentlist.template
+++ b/templates-dist/admin/commentlist.template
@@ -15,8 +15,7 @@
         <form method="post" action="${config.actionRoot}">
 	<input type="hidden" name="module" value="Comment">
 	<input type="hidden" name="do" value="list">
-	<input type="hidden" name="offset" value="${data.offset}">
-	<input type="text" size="10" maxlength="20" name="query_text" value="${data.query_text}">
+	<input type="text" size="10" maxlength="20" name="query_text" value="${encodeHTML(data.query_text)}">
 	<select name="query_field">
     <option value="title"<if data.query_field=="title"> selected</if>>${lang("comment.title")}</option>
     <option value="creator"<if data.query_field=="creator"> selected</if>>${lang("comment.creator")}</option>
@@ -48,16 +47,16 @@
   <list data.contentlist as entry>
   <tr <if grey=="1"><assign grey="0">class="list1"<else><assign grey="1">class="list2"</if>>
 
-		<td>${entry.date_formatted}<br>
+		<td>${entry.webdb_create_short}<br>
   	<if entry.is_published=="0"><font color="Brown">V</font><else>-</if>
 		</td>
 
 		<td>
-			<if entry.title><b>${entry.title}</b><br></if>
-			<if entry.creator>Von: ${entry.creator}<br></if>
-			<font size="-1">${entry.description}</font>
-			<if entry.main_url><br>URL: ${entry.main_url}</if>
-			<br><a href="${config.actionRoot}?module=Comment&do=edit&order=${data.order}&offset=${data.offset}&id=${entry.id}">${lang("edit")}</a>
+			<if entry.title><b>${encodeHTML(entry.title)}</b><br></if>
+			<if entry.creator>Von: ${encodeHTML(entry.creator)}<br></if>
+			<font size="-1">${encodeHTML(entry.description)}</font>
+			<if entry.main_url><br>URL: ${encodeHTML(entry.main_url)}</if>
+			<br><a href="${config.actionRoot}?module=Comment&do=edit&order=${encodeHTML(data.order)}&offset=${data.offset}&id=${entry.id}">${lang("edit")}</a>
 		</td>
 
 
@@ -69,24 +68,24 @@
 				view</a>
 		</td>
 
-		<td><font size="1">&nbsp;<a href="${config.actionRoot}?module=Comment&do=delete&id=${entry.id}">${lang("delete")}</a>
+		<td><font size="1">&nbsp;<a href="${config.actionRoot}?module=Comment&do=delete&id=${entry.id}&query_text=${encodeHTML(data.query_text_encoded)}&query_field=${encodeHTML(data.query_field)}&query_is_published=${data.query_is_published}&query_media_folder=${data.query_media_folder}&offset=${data.offset}&order=${data.order}">${lang("delete")}</a>
 			</font></td>
 
 	</tr>
   </list>
 
   <tr>
-    <td colspan="3" bgcolor="#006600"><font color="#ffffff">${data.count} ${lang("records")}
+    <td colspan="3" bgcolor="#006600"><font color="#ffffff">${encodeHTML(data.count)} ${lang("records")}
       / ${lang("show_from_to", data.from, data.to)}</font></td>
     <td>&nbsp;</td>
   </tr>
 <tr><td>
 
 <if data.prev>
-<a href="${config.actionRoot}?module=Comment&do=list&order=${data.order}&query_text=${data.query_text_encoded}&query_field=${data.query_field}&query_is_published=${data.query_is_published}&query_media_folder=${data.query_media_folder}&offset=${data.prev}&prev=zur&uuml;ck">zurueck</a>&nbsp;
+<a href="${config.actionRoot}?module=Comment&do=list&order=${encodeHTML(data.order)}&query_text=${encodeHTML(data.query_text_encoded)}&query_field=${encodeHTML(data.query_field)}&query_is_published=${encodeHTML(data.query_is_published)}&query_media_folder=${data.query_media_folder}&offset=${data.prev}&prev=zur&uuml;ck">zurueck</a>&nbsp;
 </if>
 <if data.next>
-<a href="${config.actionRoot}?module=Comment&do=list&order=${data.order}&query_text=${data.query_text_encoded}&query_field=${data.query_field}&query_is_published=${data.query_is_published}&query_media_folder=${data.query_media_folder}&offset=${data.next}&next=weiter">weiter</a>
+<a href="${config.actionRoot}?module=Comment&do=list&order=${encodeHTML(data.order)}&query_text=${encodeHTML(data.query_text_encoded)}&query_field=${encodeHTML(data.query_field)}&query_is_published=${data.query_is_published}&query_media_folder=${data.query_media_folder}&offset=${data.next}&next=weiter">weiter</a>
 </if>
 </td></tr>
 <else>