Changeset 16079
- Timestamp:
- 04/14/08 13:40:02 (8 months ago)
- Files:
-
- trunk/midcom/midcom.helper.search/config/manifest.inc (modified) (1 diff)
- trunk/midcom/midcom.helper.search/style/advanced_form.php (modified) (2 diffs)
- trunk/midcom/midcom.helper.search/style/basic_form.php (modified) (1 diff)
- trunk/midcom/midcom.helper.xsspreventer (copied) (copied from branches/MidCOM_2_8/midcom.helper.xsspreventer)
- trunk/midcom/midcom.helper.xsspreventer/config (copied) (copied from branches/MidCOM_2_8/midcom.helper.xsspreventer/config)
- trunk/midcom/midcom.helper.xsspreventer/config/config.inc (copied) (copied from branches/MidCOM_2_8/midcom.helper.xsspreventer/config/config.inc)
- trunk/midcom/midcom.helper.xsspreventer/config/manifest.inc (copied) (copied from branches/MidCOM_2_8/midcom.helper.xsspreventer/config/manifest.inc)
- trunk/midcom/midcom.helper.xsspreventer/main.php (copied) (copied from branches/MidCOM_2_8/midcom.helper.xsspreventer/main.php)
- trunk/midcom/midcom.helper.xsspreventer/midcom (copied) (copied from branches/MidCOM_2_8/midcom.helper.xsspreventer/midcom)
- trunk/midcom/midcom.helper.xsspreventer/midcom/interfaces.php (copied) (copied from branches/MidCOM_2_8/midcom.helper.xsspreventer/midcom/interfaces.php)
- trunk/midcom/org.openpsa.qbpager/config/manifest.inc (modified) (1 diff)
- trunk/midcom/org.openpsa.qbpager/pager.php (modified) (14 diffs)
Legend:
- Unmodified
- Added
- Removed
- Modified
- Copied
- Moved
trunk/midcom/midcom.helper.search/config/manifest.inc
r15038 r16079 30 30 ( 31 31 'midcom' => array(), 32 'midcom_helper_xsspreventer' => array(), 32 33 'http_request' => array 33 34 ( trunk/midcom/midcom.helper.search/style/advanced_form.php
r14997 r16079 45 45 46 46 midcom_helper_search_process_node($nap->get_root_node(), $nap, $topics, $components, ''); 47 $query = htmlspecialchars($data['query'], ENT_QUOTES); 47 $_MIDCOM->load_library('midcom.helper.xsspreventer'); 48 $query = midcom_helper_xsspreventer::escape_attribute($data['query']); 48 49 49 50 ?> … … 55 56 <tr> 56 57 <td><?php echo $data['l10n']->get('query');?>:</td> 57 <td><input type='text' style="width: 20em;" name='query' value= '&(query);'/></td>58 <td><input type='text' style="width: 20em;" name='query' value=&(query:h); /></td> 58 59 </tr> 59 60 <tr> trunk/midcom/midcom.helper.search/style/basic_form.php
r14997 r16079 2 2 //$data =& $_MIDCOM->get_custom_context_data('request_data'); 3 3 $prefix = $_MIDCOM->get_context_data(MIDCOM_CONTEXT_ANCHORPREFIX); 4 $query = htmlspecialchars($data['query'], ENT_QUOTES); 4 $_MIDCOM->load_library('midcom.helper.xsspreventer'); 5 $query = midcom_helper_xsspreventer::escape_attribute($data['query']); 5 6 ?> 6 7 <form method='get' name='midcom_helper_search_form' action='&(prefix);result/' class='midcom.helper.search'> 7 8 <label for="midcom_helper_search_query"> 8 9 <?php echo $data['l10n']->get('query');?>: 9 <input type='text' size='60' name='query' id='midcom_helper_search_query' value= '&(query);'/>10 <input type='text' size='60' name='query' id='midcom_helper_search_query' value=&(query:h); /> 10 11 </label> 11 12 <input type='hidden' name='type' value='basic' /> trunk/midcom/org.openpsa.qbpager/config/manifest.inc
r15038 r16079 21 21 ( 22 22 'midcom' => array(), 23 'midcom_helper_xsspreventer' => array(), 23 24 ), 24 25 ), trunk/midcom/org.openpsa.qbpager/pager.php
r15691 r16079 172 172 { 173 173 debug_add("{$page_var} has value: {$_REQUEST[$page_var]}"); 174 $this->_current_page = $_REQUEST[$page_var];174 $this->_current_page = (int)$_REQUEST[$page_var]; 175 175 } 176 176 if ( array_key_exists($results_var, $_REQUEST) … … 178 178 { 179 179 debug_add("{$results_var} has value: {$_REQUEST[$results_var]}"); 180 $this->results_per_page = $_REQUEST[$results_var];180 $this->results_per_page = (int)$_REQUEST[$results_var]; 181 181 } 182 182 $this->_offset = ($this->_current_page-1)*$this->results_per_page; … … 204 204 function _get_query_string() 205 205 { 206 $query_string = '';207 foreach(explode('&', $_SERVER["QUERY_STRING"]) as $key)208 { 209 if ( !preg_match('/org_openpsa_qbpager/', $key)210 && $key != '')211 { 212 $query_string .= '&'.$key;206 $query_string = ''; 207 foreach(explode('&', $_SERVER["QUERY_STRING"]) as $key) 208 { 209 if ( strpos($key, 'org_openpsa_qbpager') === false 210 && $key != '') 211 { 212 $query_string .= '&' . $key; 213 213 } 214 214 } … … 222 222 function show_previousnext($acl_checks=false) 223 223 { 224 $_MIDCOM->load_library('midcom.helper.xsspreventer'); 224 225 $this->_request_data['prefix'] = $this->_prefix; 225 226 $this->_request_data['current_page'] = $this->_current_page; … … 247 248 { 248 249 $previous = $data['current_page'] - 1; 249 echo "\n<a class=\"previous_page\" href= \"?{$page_var}={$previous}" . $this->_get_query_string() . "\">" . $this->_l10n->get('previous') . "</a>";250 echo "\n<a class=\"previous_page\" href=" . midcom_helper_xsspreventer::escape_attribute("?{$page_var}={$previous}" . $this->_get_query_string()) . ">" . $this->_l10n->get('previous') . "</a>"; 250 251 } 251 252 … … 253 254 { 254 255 $next = $data['current_page'] + 1; 255 echo "\n<a class=\"next_page\" href= \"?{$page_var}={$next}" . $this->_get_query_string() . "\">" . $this->_l10n->get('next') . "</a>";256 echo "\n<a class=\"next_page\" href=" . midcom_helper_xsspreventer::escape_attribute("?{$page_var}={$next}" . $this->_get_query_string()) . ">" . $this->_l10n->get('next') . "</a>"; 256 257 } 257 258 … … 266 267 function show_pages($acl_checks=false) 267 268 { 269 $_MIDCOM->load_library('midcom.helper.xsspreventer'); 268 270 $this->_request_data['prefix'] = $this->_prefix; 269 271 $this->_request_data['current_page'] = $this->_current_page; … … 304 306 if ($previous != 1) 305 307 { 306 echo "\n<a class=\"first_page\" href= \"?{$page_var}=1" . $this->_get_query_string() . "\">" . $this->_l10n->get('first') . "</a>";307 } 308 echo "\n<a class=\"previous_page\" href= \"?{$page_var}={$previous}" . $this->_get_query_string() . "\">" . $this->_l10n->get('previous') . "</a>";308 echo "\n<a class=\"first_page\" href=" . midcom_helper_xsspreventer::escape_attribute("?{$page_var}=1" . $this->_get_query_string()) . ">" . $this->_l10n->get('first') . "</a>"; 309 } 310 echo "\n<a class=\"previous_page\" href=" . midcom_helper_xsspreventer::escape_attribute("?{$page_var}={$previous}" . $this->_get_query_string()) . ">" . $this->_l10n->get('previous') . "</a>"; 309 311 } 310 312 … … 321 323 continue; 322 324 } 323 echo "\n<a class=\"select_page\" href= \"?{$page_var}={$page}" . $this->_get_query_string() . "\">{$page}</a>";325 echo "\n<a class=\"select_page\" href=" . midcom_helper_xsspreventer::escape_attribute("?{$page_var}={$page}" . $this->_get_query_string()) . ">{$page}</a>"; 324 326 } 325 327 … … 327 329 { 328 330 $next = $data['current_page'] + 1; 329 echo "\n<a class=\"next_page\" href= \"?{$page_var}={$next}" . $this->_get_query_string() . "\">" . $this->_l10n->get('next') . "</a>";331 echo "\n<a class=\"next_page\" href=" . midcom_helper_xsspreventer::escape_attribute("?{$page_var}={$next}" . $this->_get_query_string()) . ">" . $this->_l10n->get('next') . "</a>"; 330 332 331 333 if ($next != $data['page_count']) 332 334 { 333 echo "\n<a class=\"last_page\" href= \"?{$page_var}={$data['page_count']}" . $this->_get_query_string() . "\">" . $this->_l10n->get('last') . "</a>";335 echo "\n<a class=\"last_page\" href=" . midcom_helper_xsspreventer::escape_attribute("?{$page_var}={$data['page_count']}" . $this->_get_query_string()) . ">" . $this->_l10n->get('last') . "</a>"; 334 336 } 335 337 } … … 345 347 function show_pages_as_xml($acl_checks=false, $echo=true) 346 348 { 349 $_MIDCOM->load_library('midcom.helper.xsspreventer'); 347 350 $pages_xml_str = "<pages "; 348 351 … … 393 396 if ($previous != 1) 394 397 { 395 $pages_xml_str .= "<page class=\"first_page\" number=\"1\" url= \"?{$page_var}=1" . $this->_get_query_string() . "\"><![CDATA[" . $this->_l10n->get('first') . "]]></page>\n";396 } 397 $pages_xml_str .= "<page class=\"previous_page\" number=\"{$previous}\" url= \"?{$page_var}={$previous}" . $this->_get_query_string() . "\"><![CDATA[" . $this->_l10n->get('previous') . "]]></page>\n";398 $pages_xml_str .= "<page class=\"first_page\" number=\"1\" url=" . midcom_helper_xsspreventer::escape_attribute("?{$page_var}=1" . $this->_get_query_string()) . "><![CDATA[" . $this->_l10n->get('first') . "]]></page>\n"; 399 } 400 $pages_xml_str .= "<page class=\"previous_page\" number=\"{$previous}\" url=" . midcom_helper_xsspreventer::escape_attribute("?{$page_var}={$previous}" . $this->_get_query_string()) . "><![CDATA[" . $this->_l10n->get('previous') . "]]></page>\n"; 398 401 } 399 402 … … 412 415 } 413 416 414 $pages_xml_str .= "<page class=\"select_page\" number=\"{$page}\" url= \"?{$page_var}={$page}" . $this->_get_query_string() . "\">{$page}</page>\n";417 $pages_xml_str .= "<page class=\"select_page\" number=\"{$page}\" url=" . midcom_helper_xsspreventer::escape_attribute("?{$page_var}={$page}" . $this->_get_query_string()) . ">{$page}</page>\n"; 415 418 } 416 419 … … 418 421 { 419 422 $next = $data['current_page'] + 1; 420 $pages_xml_str .= "<page class=\"next_page\" number=\"{$next}\" url= \"?{$page_var}={$next}" . $this->_get_query_string() . "\"><![CDATA[" . $this->_l10n->get('next') . "]]></page>\n";423 $pages_xml_str .= "<page class=\"next_page\" number=\"{$next}\" url=" . midcom_helper_xsspreventer::escape_attribute("?{$page_var}={$next}" . $this->_get_query_string()) . "><![CDATA[" . $this->_l10n->get('next') . "]]></page>\n"; 421 424 422 425 if ($next != $data['page_count']) 423 426 { 424 $pages_xml_str .= "<page class=\"last_page\" number=\"{$data['page_count']}\" url= \"?{$page_var}={$data['page_count']}" . $this->_get_query_string() . "\"><![CDATA[" . $this->_l10n->get('last') . "]]></page>\n";427 $pages_xml_str .= "<page class=\"last_page\" number=\"{$data['page_count']}\" url=" . midcom_helper_xsspreventer::escape_attribute("?{$page_var}={$data['page_count']}" . $this->_get_query_string()) . "><![CDATA[" . $this->_l10n->get('last') . "]]></page>\n"; 425 428 } 426 429 }
