wrap pretty much all freemarker variables (i.e the data) in encodeHTML(data..). this...
[mir.git] / templates-dist / admin / messagelist.template
1 <html>
2 <head>
3         <title>${lang("messagelist.htmltitle")}</title>
4 </head>
5
6 <body bgcolor="#FFFFFF">
7 <include "admin/head.template">
8 <if data.contentlist>
9 <table border="0" cellpadding="2" cellspacing="1">
10   <tr bgcolor="#006600">
11     <td><font color="#FFFFFF" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
12                 <b>${lang("message.date")}</b></font></td>
13     <td><font color="#FFFFFF" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
14                 <b>${lang("message.title")}<br>${lang("message.creator")}</b></font></td>
15     <td><font color="#FFFFFF" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
16                 <b>${lang("message.text")}</b></font></td>
17   </tr>
18
19   <list data.contentlist as entry>
20   <tr
21        <if grey=="1"><assign grey="0">bgcolor="#dddddd" <else><assign grey="1"> </if>
22   >
23   <td>${encodeHTML(entry.webdb_create)}&nbsp;</td>
24   <td><b>${encodeHTML(entry.title)}</b><br>
25       <i>${encodeHTML(entry.creator)}</i></td>
26   <td bgcolor="Pink">${encodeHTML(entry.description)}&nbsp;</td>
27   <td><font size="1">&nbsp;<a href="${encodeHTML(config.actionRoot)}?module=Message&do=delete&id=${encodeHTML(entry.id)}">${lang("delete")}</a>
28     | <a href="${encodeHTML(config.actionRoot)}?module=Message&do=edit&id=${encodeHTML(entry.id)}">${lang("edit")}</a></font></td>
29   </tr>
30   </list>
31   <tr>
32     <td colspan="3" bgcolor="#006600"><font color="#ffffff">${encodeHTML(data.count)} ${lang("records")} /
33         ${lang("show_from_to", data.from, data.to)}</font></td>
34     <td>&nbsp;</td>
35   </tr>
36 </table>
37
38       <P>
39 <if data.prev>
40         <a href="${encodeHTML(config.actionRoot)}?module=Users&do=list&where=${encodeHTML(data.where)}&prevoffset=${encodeHTML(data.prev)}&prev=zur&uuml;ck">${lang("list.previous")}</a>&nbsp;
41 </if>
42 <if data.next>
43 <a href="${encodeHTML(config.actionRoot)}?module=Users&do=list&where=${encodeHTML(data.where)}&nextoffset=${encodeHTML(data.next)}&next=weiter">${lang("list.next")}</a>
44 </if>
45
46 <else>
47   <P align="center">${lang("no_matches_found")}</p>
48 </if>
49 <include "admin/foot.template">
50 </body>
51 </html>