Changeset 1146:aff704bcccea for inc/admin

Timestamp:

06/12/13 10:58:44 (12 years ago)

Author:

Dsls <dsls@…>

Branch:

default

Children:

1157:7b991a71afff, 1159:887a30463ee0

Message:

Strenghened lists display.

File:

• inc/admin/lib.pager.php (modified) (4 diffs)

inc/admin/lib.pager.php

@@ -133 +133 @@
           '<td class="nowrap">'.dt::dt2str(__('%Y-%m-%d %H:%M'),$this->rs->post_dt).'</td>'.
           '<td class="nowrap">'.$cat_title.'</td>'.
-          '<td class="nowrap">'.$this->rs->user_id.'</td>'.
+          '<td class="nowrap">'.html::escapeHTML($this->rs->user_id).'</td>'.
           '<td class="nowrap">'.$this->rs->nb_comment.'</td>'.
           '<td class="nowrap">'.$this->rs->nb_trackback.'</td>'.
@@ -230 +230 @@
           html::escapeHTML($this->rs->post_title).'</a></td>'.
           '<td class="nowrap">'.dt::dt2str(__('%Y-%m-%d %H:%M'),$this->rs->post_dt).'</td>'.
-          '<td class="nowrap">'.$this->rs->user_id.'</td>'.
+          '<td class="nowrap">'.html::escapeHTML($this->rs->user_id).'</td>'.
           '<td class="nowrap status">'.$img_status.' '.$selected.' '.$protected.' '.$attach.'</td>'.
           '</tr>';
@@ -334 +334 @@
           ($this->rs->post_type != 'post' ? ' ('.html::escapeHTML($this->rs->post_type).')' : '').'</td>'.
           '<td class="nowrap">'.dt::dt2str(__('%Y-%m-%d %H:%M'),$this->rs->comment_dt).'</td>'.
-          '<td class="nowrap"><a href="'.$author_url.'">'.$comment_author.'</a></td>'.
+          '<td class="nowrap"><a href="'.$author_url.'">'.html::escapeHTML($comment_author).'</a></td>'.
           '<td class="nowrap">'.($this->rs->comment_trackback ? __('trackback') : __('comment')).'</td>'.
           '<td class="nowrap status">'.$img_status.'</td>'.
@@ -410 +410 @@
           '<td class="maximal"><a href="user.php?id='.$this->rs->user_id.'">'.
           $this->rs->user_id.'</a>&nbsp;'.$img_status.'</td>'.
-          '<td class="nowrap">'.$this->rs->user_firstname.'</td>'.
-          '<td class="nowrap">'.$this->rs->user_name.'</td>'.
-          '<td class="nowrap">'.$this->rs->user_displayname.'</td>'.
+          '<td class="nowrap">'.html::escapeHTML($this->rs->user_firstname).'</td>'.
+          '<td class="nowrap">'.html::escapeHTML($this->rs->user_name).'</td>'.
+          '<td class="nowrap">'.html::escapeHTML($this->rs->user_displayname).'</td>'.
           '<td class="nowrap"><a href="posts.php?user_id='.$this->rs->user_id.'">'.
           $this->rs->nb_post.'</a></td>'.