wrap pretty much all freemarker variables (i.e the data) in encodeHTML(data..). this...
[mir.git] / templates-dist / admin / contentlist.template
1 <html>
2 <head>
3         <title>${lang("contentlist.htmltitle")}</title>
4 </head>
5
6 <body bgcolor="#FFFFFF">
7 <include "admin/head.template">
8 <if data.contentlist>
9         <table border="0" width="100%" cellspacing="0" cellpadding="2">
10           <tr bgcolor="#006600">
11             <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1" color="#ffffff">
12                         ${lang("content.creationdate")}<br>
13                         ${lang("content.modificationdate")}<br>
14                         ${lang("content.status")}</font></td>
15             <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1" color="#ffffff">
16                         ${lang("content.type")} / ${lang("content.location")}: ${lang("content.title")}<br>
17                         ${lang("content.creator")}</font></td>
18             <td ><font face="Verdana, Arial, Helvetica, sans-serif" size="-1" color="#ffffff">${lang("content.topic")}<br>${lang("content.feature")}</font></td>
19             <td width="25%"><font face="Verdana, Arial, Helvetica, sans-serif" size="-1" color="#ffffff">
20                         ${lang("content.comment")}</font></td>
21                 <td bgcolor="#FFFFFF">&nbsp;</td>
22           </tr>
23
24         <list data.contentlist as entry>
25           <tr <if grey=="1"><assign grey="0">bgcolor="#dddddd" <else><assign grey="1"></if>>
26             <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-2">
27                         ${encodeHTML(entry.webdb_create_formatted)}<br>
28                         <if entry.webdb_lastchange>${encodeHTML(entry.webdb_lastchange_formatted)}<else>-</if><br>
29                         <if entry.is_published!="0">F<else>-</if>
30                         <if entry.is_html!="0">H<else>-</if>
31                         </font></td>
32             <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1"><b>
33                         <font size="-2">${articletypeHash[entry.to_article_type]["name"]} -- </font><if entry.place>${encodeHTML(entry.place)}: </if>${encodeHTML(entry.title)}</b><br>
34                         ${encodeHTML(entry.creator)}&nbsp;
35                         <a href="${encodeHTML(config.actionRoot)}?module=Content&do=edit&id=${encodeHTML(entry.id)}&where=${encodeHTML(data.where_encoded)}&order=${encodeHTML(data.order_encoded)}&offset=${encodeHTML(data.offset)}">${lang("edit")}</a>
36                         <if entry.to_article_type=="0">&nbsp;|&nbsp;<a href="${encodeHTML(config.actionRoot)}?module=Content&do=newswire&id=${encodeHTML(entry.id)}&where=${encodeHTML(data.where_encoded)}&order=${encodeHTML(data.order_encoded)}&offset=${encodeHTML(data.offset)}">newswire</a></if></font></td>
37             <td><font face="Verdana, Arial, Helvetica, sans-serif" size="-1">
38                         <if entry.thema_id!="0">${themenHashData[entry.thema_id]["name"]}</if>&nbsp;<br>
39                         <if entry.to_feature!="0">${schwerpunktHashData[entry.to_feature]["title"]}</if>&nbsp;</font></td>
40             <td width="20%" <if grey=="1">bgcolor="Pink"<else>bgcolor="Yellow"</if> valign="top"><font face="Verdana, Arial, Helvetica, sans-serif" size="-2">
41                         ${encodeHTML(entry.comment)}&nbsp;</font></td>
42             <td bgcolor="#888888"><font size="1">
43               <a href="${encodeHTML(config.actionRoot)}?module=Content&do=delete&id=${encodeHTML(entry.id)}&where=${encodeHTML(data.where_encoded)}&order=${encodeHTML(data.order_encoded)}&offset=${encodeHTML(data.offset)}">${lang("delete")}</a>
44               </font></td>
45         </tr>
46         </list>
47         <tr bgcolor="#006600">
48             <td colspan="4"><font color="#ffffff">${encodeHTML(data.count)} ${lang("records")}
49       / ${lang("show_from_to", data.from, data.to)}</font></td></tr>
50         </table>
51
52       <P>
53 <if data.prev || data.next>
54  <form method="post" action="${encodeHTML(config.actionRoot)}">
55  <input type="hidden" name="module" value="Content">
56  <input type="hidden" name="do" value="listop">
57  <input type="hidden" name="where" value="${encodeHTML(data.where)}">
58  <input type="hidden" name="order" value="${encodeHTML(data.order)}">
59 <if data.prev>
60  <input type="hidden" name="prevoffset" value="${encodeHTML(data.prev)}">
61  <input type="submit" name="prev" value="${lang("list.previous")}">
62 </if>
63 <if data.next>
64  <input type="hidden" name="nextoffset" value="${encodeHTML(data.next)}">
65  <input type="submit" name="next" value="${lang("list.next")}">
66 </if>
67  </form>
68 </if>
69
70 <else>
71   <P align="center">${lang("no_matches_found")}</p>
72 </if>
73
74 <include "admin/foot.template">
75 </body>
76 </html>