X-Git-Url: http://erislabs.net/gitweb/?a=blobdiff_plain;f=templates-dist%2Fadmin%2Ftopiclist.template;h=e9472947e679934533f181f70f473900dcd560f0;hb=b824bb63090abfabe99b73f57246df760748d0f9;hp=61832f5de9d1e167d4c949a56af0327ac4c479e6;hpb=e096ea3195a90521acdf06c44d05abac609cb9ea;p=mir.git

diff --git a/templates-dist/admin/topiclist.template b/templates-dist/admin/topiclist.template
index 61832f5d..e9472947 100755
--- a/templates-dist/admin/topiclist.template
+++ b/templates-dist/admin/topiclist.template
@@ -17,32 +17,34 @@
   </tr>
   <list data.contentlist as entry>
   <tr <if grey=="1"><assign grey="0">bgcolor="#dddddd" <else><assign grey="1"> </if>>
-  <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1">${entry.title}&nbsp;</font></td>
-  <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1">${entry.description}&nbsp;</font></td>
+  <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1">${encodeHTML(entry.title)}&nbsp;</font></td>
+  <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1">${encodeHTML(entry.description)}&nbsp;</font></td>
   <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1">
-  	${entry.main_url}<br>
-  	${entry.archiv_url}</font></td>
-  <td><font size="1">&nbsp;<a href="${actionRoot}?module=Topics&do=delete&id=${entry.id}">${lang("delete")}</a>
-    | <a href="${actionRoot}?module=Topics&do=edit&id=${entry.id}">${lang("edit")}</a></font></td>
+  	${encodeHTML(entry.main_url)}<br>
+  	${encodeHTML(entry.archiv_url)}</font></td>
+  <td><font size="1">&nbsp;<a href="${config.actionRoot}?module=Topics&do=delete&id=${entry.id}">${lang("delete")}</a>
+    | <a href="${config.actionRoot}?module=Topics&do=edit&id=${entry.id}">${lang("edit")}</a></font></td>
   </tr>
   </list>
   <tr>
   <td colspan="4" bgcolor="#006600"><font face="Verdana, Arial, Helvetica, sans-serif" size="-1" color="#ffffff">
-  	${data.count} ${lang("records")} / ${lang("show_from_to", data.from, data.to)}</font></td>
+  	${encodeHTML(data.count)} ${lang("records")} / ${lang("show_from_to", data.from, data.to)}</font></td>
   <td>&nbsp;</td>
   </tr>
 </table>
 <P>
-<if (prev || next)>
+<if (data.prev || data.next)>
  <form method="post" action="${config.actionRoot}">
  <input type="hidden" name="module" value="Topics">
- <input type="hidden" name="where" value="${where}">
-<if prev>
- <input type="hidden" name="prevoffset" value="${prev}">
+ <input type="hidden" name="where" value="${encodeHTML(data.where)}">
+<if data.prev>
+ <input type="hidden" name="do" value="list">
+ <input type="hidden" name="prevoffset" value="${encodeHTML(data.prev)}">
  <input type="submit" name="prev" value="${lang("list.previous")}">
 </if>
-<if next>
- <input type="hidden" name="nextoffset" value="${next}">
+<if data.next>
+ <input type="hidden" name="do" value="list">
+ <input type="hidden" name="nextoffset" value="${encodeHTML(data.next)}">
  <input type="submit" name="next" value="${lang("list.next")}">
 </if>
  </form>