X-Git-Url: http://erislabs.net/gitweb/?a=blobdiff_plain;f=templates-dist%2Fadmin%2Fuserlist.template;h=794e67c5f4f095dd1c77576a171e2cf31aedd9fe;hb=5ff55a1f615f4b1c437ee4a5ccc9581f48188f5a;hp=8fea5ed482f123a34823e5fd9816de50ececc6ef;hpb=9c43437577f3239c3c3526759edc6c3f9d8a31e8;p=mir.git

diff --git a/templates-dist/admin/userlist.template b/templates-dist/admin/userlist.template
index 8fea5ed4..794e67c5 100755
--- a/templates-dist/admin/userlist.template
+++ b/templates-dist/admin/userlist.template
@@ -16,14 +16,14 @@
   <tr
        <if grey=="1"><assign grey="0">bgcolor="#dddddd" <else><assign grey="1"> </if>
   >
-  <td>${entry.login}&nbsp;</td>
-  <td>${entry.is_admin}&nbsp;</td>
-  <td><font size="1">&nbsp;<a href="${config.actionRoot}?module=Users&do=delete&id=${entry.id}">${lang("delete")}</a>
-    | <a href="${config.actionRoot}?module=Users&do=edit&id=${entry.id}">${lang("edit")}</a></font></td>
+  <td>${encodeHTML(entry.login)}&nbsp;</td>
+  <td>${encodeHTML(entry.is_admin)}&nbsp;</td>
+  <td><font size="1">&nbsp;<a href="${encodeHTML(config.actionRoot)}?module=Users&do=delete&id=${encodeHTML(entry.id)}">${lang("delete")}</a>
+    | <a href="${encodeHTML(config.actionRoot)}?module=Users&do=edit&id=${encodeHTML(entry.id)}">${lang("edit")}</a></font></td>
   </tr>
   </list>
   <tr>
-    <td colspan="3" bgcolor="#006600"><font color="#ffffff">${data.count} ${lang("records")}
+    <td colspan="3" bgcolor="#006600"><font color="#ffffff">${encodeHTML(data.count)} ${lang("records")}
       /  ${lang("show_from_to", data.from, data.to)}</font></td>
     <td>&nbsp;</td>
   </tr>
@@ -31,10 +31,10 @@
 
       <P>
 <if data.prev>
-	<a href="${actionRoot}?module=Users&do=list&where=${where}&prevoffset=${prev}&prev=zur&uuml;ck">${lang("list.previous")}</a>&nbsp;
+	<a href="${encodeHTML(actionRoot)}?module=Users&do=list&where=${encodeHTML(where)}&prevoffset=${encodeHTML(prev)}&prev=zur&uuml;ck">${lang("list.previous")}</a>&nbsp;
 </if>
 <if data.next>
-<a href="${actionRoot}?module=Users&do=list&where=${where}&nextoffset=${next}&next=weiter">${lang("list.next")}</a>
+<a href="${encodeHTML(actionRoot)}?module=Users&do=list&where=${encodeHTML(where)}&nextoffset=${encodeHTML(next)}&next=weiter">${lang("list.next")}</a>
 </if>
 
 <else>