L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Some clear_text() and format_text() calls added.

Browse Source 
Merged from MOODLE_14_STABLE
This commit is contained in:
stronk7
2004-10-01 10:32:34 +00:00
parent ed187d7506
commit 6f84a9d2db
3 changed files with 10 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mod/glossary/edit.html
+3 -3
View File
@@ -17,7 +17,7 @@ if (isset($errors)) {
<td valign="top"><table border="0" width="100%" cellspacing="0" cellpadding="5">
<tr>
<td width="150" align="right"><p><b><?php echo get_string("concept","glossary") ?>:</b></p></td>
<td><input type="text" name="concept" size="30" value="<?php p($newentry->concept) ?>" /></td>
<td><input type="text" name="concept" size="30" value="<?php p(clean_text($newentry->concept)) ?>" /></td>
</tr>
<tr>
<td align="right"><p><b><?php echo get_string("categories","glossary") ?>:</b></p></td>
@@ -35,7 +35,7 @@ if (isset($errors)) {
echo "selected=\"selected\" " ;
}
}
echo "value=\"$category->id\">$category->name</option>\n";
echo "value=\"$category->id\">".clean_text($category->name)."</option>\n";
}
}
echo "</select>\n";
@@ -53,7 +53,7 @@ if (isset($errors)) {
?></b></p>
</td>
<td valign="top">
<textarea rows="2" name="aliases" cols="20"><?php p($newentry->aliases) ?></textarea>
<textarea rows="2" name="aliases" cols="20"><?php p(clean_text($newentry->aliases)) ?></textarea>
</td>
</tr>
<tr>
mod/glossary/edit.php
+2 -2
View File
@@ -53,7 +53,7 @@ if ( $confirm ) {
$newentry->course = $glossary->course;
$newentry->glossaryid = $glossary->id;
$newentry->concept = trim($form->concept);
$newentry->concept = clean_text(trim($form->concept));
$newentry->definition = $form->text;
$newentry->format = $form->format;
$newentry->usedynalink = $form->usedynalink;
@@ -192,7 +192,7 @@ if ( $confirm ) {
}
}
if ( isset($form->aliases) ) {
if ( $aliases = explode("\n",$form->aliases) ) {
if ( $aliases = explode("\n",clean_text($form->aliases)) ) {
foreach ($aliases as $alias) {
$alias = trim($alias);
if ($alias) {
mod/glossary/editcategories.php
+5 -3
View File
@@ -12,7 +12,9 @@
optional_variable($usedynalink); // category ID
optional_variable($confirm); // confirm the action
optional_variable($name); // confirm the action
optional_variable($name); // confirm the name
$name = clean_text($name);
$action = strip_tags(urldecode($action)); //XSS
$hook = strip_tags(urldecode($hook)); //XSS
@@ -100,7 +102,7 @@
echo "<p align=\"center\">" . get_string("delete"). " " . get_string("category","glossary") . "<font size=\"3\">";
print_simple_box_start("center","40%", "#FFBBBB");
echo "<center><b>$category->name</b><br />";
echo "<center><b>".format_text($category->name)."</b><br>";
$num_entries = count_records("glossary_entries_categories","categoryid",$category->id);
if ( $num_entries ) {
@@ -200,7 +202,7 @@
<tr bgcolor="<?php p($THEME->cellheading2)?>">
<td width="90%" align="left">
<?php
echo "<b>$category->name</b> <font size=-1>($num_entries " . get_string("entries","glossary") . ")</font>";
echo "<b>".format_text($category->name)."</b> <font size=-1>($num_entries " . get_string("entries","glossary") . ")</font>";
?>
</td>
<td width="10%" align="center"><b>