wrap pretty much all freemarker variables (i.e the data) in encodeHTML(data..). this...
[mir.git] / templates-dist / admin / audio.template
1 <html>
2 <head>
3 <title>
4 ${lang("audio.htmltitle")}
5 </title>
6 </head>
7 <SCRIPT LANGUAGE="JavaScript">
8 function openWin(url) {
9    window.open(url,"vc","scrollbars=0,height=${encodeHTML(data.img_height)},width=${encodeHTML(data.img_width)}");
10 }
11 </SCRIPT>
12 <body bgcolor="#FFFFFF">
13 <include "admin/head.template">
14
15 <if data.new>
16 <form action="${encodeHTML(config.actionRoot)}?module=Audio&do=add" method="post">
17         <table border="0">
18         <tr>
19         <td align="right" bgcolor="#006600">
20         <font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
21         <b>${lang("open.posting.nr_of_media")}</b> <br>
22         </font>
23         </td>
24         <td>
25         <input type="text" size="3" name="medianum" value="${encodeHTML(medianum)}">&nbsp;<input type="submit" value="${lang("open.posting.nr_of_media.submit")}">
26         </td>
27         </tr>
28         </table> 
29 </form>
30 </if>
31 <form enctype="multipart/form-data" method="post" action="${encodeHTML(config.actionRoot)}?module=Audio&do=<if data.new>insert<else>update</if>&id=${encodeHTML(data.id)}">
32         <input type="hidden" name="where" value="${encodeHTML(data.where)}">
33         <input type="hidden" name="offset" value="${encodeHTML(data.offset)}">
34         <input type="hidden" name="order" value="${encodeHTML(data.order)}">
35         <input type="hidden" name="id" value="${encodeHTML(data.id)}">
36
37         <table border="0">
38         <if !data.new>
39         <tr>
40     <td align="right" bgcolor="#006600">
41                 <font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
42                         <a href="${encodeHTML(config.actionRoot)}?module=Audio&do=getMedia&id=${encodeHTML(data.id)}">
43                         <img src="${encodeHTML(config.docRoot)}/img/${encodeHTML(data.big_icon)}" border=0></a></font></td>
44     <td valign="bottom"><font color="Silver" face="Verdana, Arial, Helvetica, sans-serif" size=1>
45                 ${lang("media.created")}: ${encodeHTML(data.webdb_create)}
46         <if data.webdb_lastchange>/ ${lang("media.changed")} ${encodeHTML(data.webdb_lastchange)}</if><br>
47                 <if data.is_published=="1">${lang("media.published")}: ${encodeHTML(data.publish_date)} / ${encodeHTML(data.publish_server)}${encodeHTML(data.publish_path)}<br></if>
48                 ${lang("media.format")}: ${encodeHTML(data.mimetype)} / ${encodeHTML(data.media_descr)} / ${encodeHTML(data.human_readable_size)}<br>
49                 ${lang("media.rights")}: <b>${data.rightsHashdata[to_rights]["name"]}</b><br>
50         </td>
51         </tr>
52         </if>
53
54         <tr>
55     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
56          <B>${lang("media.mediafolder")}:</B></font></td>
57     <td>
58                 <select name="to_media_folder">
59                 <list extra.mediafolderPopupData as m>
60                 <option value="${encodeHTML(m.key)}" <if m.key == data.to_media_folder>selected</if>>${encodeHTML(m.value)}</option>
61                 </list>
62             </select>
63         </td>
64         </tr>
65
66         <tr>
67     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
68          <B>${lang("media.description")}:</B></font></td>
69     <td><input type="text" size="40" maxlength="255" name="description" value="${encodeHTML(data.description)}"></td>
70         </tr>
71
72         <tr>
73     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
74          <B>${lang("media.date")}:</B></font></td>
75     <td><input type="text" size="8" maxlength="8" name="date" value="${encodeHTML(data.date)}">
76                 <input type="text" size="20" maxlength="40" name="year" value="${encodeHTML(data.year)}"></td>
77         </tr>
78
79         <tr>
80     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
81          <B>${lang("media.location")}:</B></font></td>
82     <td><input type="text" size="40" maxlength="80" name="place" value="${encodeHTML(data.place)}"></td>
83         </tr>
84
85         <tr>
86     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
87          <B>${lang("media.creator")}:</B></font></td>
88     <td>
89                 <input type="text" size="40" maxlength="80" name="creator" value="${encodeHTML(data.creator)}">
90         </tr>
91
92         <tr>
93     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
94          <B>${lang("media.keywords")}:</B></font></td>
95     <td><textarea cols="40" rows="2" name="keywords">${encodeHTML(data.keywords)}</textarea></td>
96         </tr>
97
98         <tr>
99     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
100          <B>${lang("media.comment")}:</B></font></td>
101     <td><textarea cols="40" rows="2" name="comment">${encodeHTML(data.comment)}</textarea></td>
102         </tr>
103
104         <tr>
105     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
106          <B>${lang("media.source")}:</B></font></td>
107     <td><input type="text" size="40" maxlength="80" name="source" value="${encodeHTML(data.source)}"></td>
108         </tr>
109         <tr>
110     <td colspan="2" align="right"> <font color="black">
111         <if data.new>
112         <tr>
113         <td>
114                 ${lang("media.is_published")} <input type="checkbox" name="is_published" value="1"<if data.is_published!="0" && data.is_published!=""> checked</if>>
115         </td>
116         </tr>
117         
118         <list data.mediafields as m>
119                 <tr>
120                 <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
121
122                         <B>${lang("media.title")}:<B>
123                 </font> </td>
124                 <td>
125                         <input type="text" name="media_title${encodeHTML(m)}" size="40" maxlength="80" value="">
126                 </td>
127                 </tr>
128                 <tr>
129                 <td bgcolor="#006600"></td>
130                 <td>
131                                 <INPUT TYPE="file" NAME="mpfile${encodeHTML(m)}"><br>
132                 </td>   
133                 </tr>   
134         </list>
135         <else>
136                 <tr>
137                 <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
138
139                         <B>${lang("media.title")}:<B>
140                 </font> </td>
141                 <td>
142                         <input type="text" name="title" size="40" maxlength="80" value="${encodeHTML(data.title)}">
143                 </td>
144                 </tr>
145         </if>
146     <td colspan="2" align="right"> <font color="black">
147         <if data.new>
148       <input type="submit" name="save" value="${lang("insert")}">
149     <else>
150         ${lang("media.is_published")} <input type="checkbox" name="is_published" value="1"<if data.is_published!="0" && data.is_published!=""> checked</if>>
151     <input type="submit" name="save" value="${lang("save")}">
152     </if> </font></form></font>
153     </td>
154 </table>
155 <include "admin/foot.template">
156 </body>
157 </html>