Projekt

Allgemein

Profil

« Zurück | Weiter » 

Revision 54a84c2e

Von Thomas Heck vor fast 12 Jahren hinzugefügt

  • ID 54a84c2e49dbfdbf1e636ec3613fc5f96fc193bf
  • Vorgänger 46231fcc
  • Nachfolger 8b8f7572

HTML-Escape unter templates/ap/form_header.html eingefügt

Unterschiede anzeigen:

templates/webpages/ap/form_header.html
25 25

  
26 26
<script type="text/javascript" src="js/show_history.js"></script>
27 27

  
28
<form method="post" action="[% script %]">
28
<form method="post" action="[% script | html %]">
29 29

  
30 30
<input type="hidden" name="selectvendor" value="[% selectvendor | html %]">
31 31
<input type="hidden" name="selectdepartment" value="[% selectdepartment | html %]">
......
35 35
<input type="hidden" name="vendor_id" value="[% vendor_id | html %]">
36 36
<input type="hidden" name="terms" value="[% terms | html %]">
37 37

  
38
<input type="hidden" name="creditlimit" value="[% creditlimit %]">
39
<input type="hidden" name="creditremaining" value="[% creditremaining %]">
38
<input type="hidden" name="creditlimit" value="[% creditlimit | html %]">
39
<input type="hidden" name="creditremaining" value="[% creditremaining | html %]">
40 40

  
41
<input type="hidden" name="forex" value="[% forex %]">
41
<input type="hidden" name="forex" value="[% forex | html %]">
42 42

  
43
<input type="hidden" name="id" value="[% id %]">
44
<input type="hidden" name="sort" value="[% sort %]">
45
<input type="hidden" name="closedto" value="[% closedto %]">
46
<input type="hidden" name="locked" value="[% locked %]">
47
<input type="hidden" name="title" value="[% title_ %]">
43
<input type="hidden" name="id" value="[% id | html %]">
44
<input type="hidden" name="sort" value="[% sort | html %]">
45
<input type="hidden" name="closedto" value="[% closedto | html %]">
46
<input type="hidden" name="locked" value="[% locked | html %]">
47
<input type="hidden" name="title" value="[% title_ | html %]">
48 48

  
49 49
<input type="hidden" name="follow_up_trans_id_1" value="[% id | html %]">
50 50
<input type="hidden" name="follow_up_trans_type_1" value="ap_transaction">
51 51
<input type="hidden" name="follow_up_trans_info_1" value="[% follow_up_trans_info | html %]">
52 52
<input type="hidden" name="follow_up_rowcount" value="1">
53 53

  
54
<input type="hidden" name="defaultcurrency" value="[% defaultcurrency | $T8 %]">
55
<input type="hidden" name="fxgain_accno" value="[% fxgain_accno %]">
56
<input type="hidden" name="fxloss_accno" value="[% fxloss_accno %]">
54
<input type="hidden" name="defaultcurrency" value="[% defaultcurrency | html %]">
55
<input type="hidden" name="fxgain_accno" value="[% fxgain_accno | html %]">
56
<input type="hidden" name="fxloss_accno" value="[% fxloss_accno | html %]">
57 57

  
58
<input type="hidden" name="oldinvtotal" value="[% oldinvtotal %]">
59
<input type="hidden" name="oldtotalpaid" value="[% oldtotalpaid %]">
58
<input type="hidden" name="oldinvtotal" value="[% oldinvtotal | html %]">
59
<input type="hidden" name="oldtotalpaid" value="[% oldtotalpaid | html %]">
60 60

  
61
<input type="hidden" name="taxaccounts" value="[% taxaccounts %]">
61
<input type="hidden" name="taxaccounts" value="[% taxaccounts | html %]">
62 62

  
63
<input type="hidden" name="rowcount" value="[% rowcount %]">
63
<input type="hidden" name="rowcount" value="[% rowcount | html %]">
64 64

  
65
<input type="hidden" name="paidaccounts" value="[% paidaccounts %]">
65
<input type="hidden" name="paidaccounts" value="[% paidaccounts | html %]">
66 66

  
67 67
[% FOREACH i IN [1..paidaccounts] %]
68 68
  [% temp = "acc_trans_id_"_ i %]
69
  <input type="hidden" name="[% temp %]" value="[% $temp %]">
69
  <input type="hidden" name="[% temp %]" value="[% $temp | html %]">
70 70

  
71 71
  [% temp = "gldate_"_ i %]
72
  <input type="hidden" name="[% temp %]" value="[% $temp %]">
72
  <input type="hidden" name="[% temp %]" value="[% $temp | html %]">
73 73
[% END %]
74 74

  
75 75
<h1>[% title | html %]</h1>
......
78 78
  <p>[% saved_message | html %]</p>
79 79
[% END %]
80 80

  
81
<table width=100%>
82
  <tr valign=top>
81
<table width="100%">
82
  <tr valign="top">
83 83
    <td>
84
      <table width=100%>
85
        <tr valign=top>
84
      <table width="100%">
85
        <tr valign="top">
86 86
          <td>
87 87
            <table>
88 88
              <tr>
89
                <th align=right nowrap>[% 'Vendor' | $T8 %]</th>
90
                <td colspan=3>
89
                <th align="right" nowrap>[% 'Vendor' | $T8 %]</th>
90
                <td colspan="3">
91 91
                  [% IF ( selectvendor ) %]
92 92
                    <select name="vendor" onchange="document.getElementById('update_button').click();">[% selectvendor %]</select>
93 93
                  [% ELSE %]
94
                    <input name=vendor value="[% vendor %]" size="35">
94
                    <input name=vendor value="[% vendor | html %]" size="35">
95 95
                  [% END %]
96 96
                  <input type="button" value="D" onclick="show_vc_details('vendor')">
97 97
                </td>
......
99 99

  
100 100
              <tr>
101 101
                <td></td>
102
                <td colspan=3>
102
                <td colspan="3">
103 103
                  <table width="100%">
104 104
                    <tr>
105 105
                      <th align="left" nowrap>[% 'Credit Limit' | $T8 %]</th>
106
                      <td>[% creditlimit %]</td>
106
                      <td>[% creditlimit | html %]</td>
107 107
                      <th align="left" nowrap>[% 'Remaining' | $T8 %]</th>
108
                      <td class="plus[% creditremaining_plus %]">[% creditremaining %]</td>
108
                      <td class="plus[% creditremaining_plus %]">[% creditremaining | html %]</td>
109 109
                    </tr>
110 110
                  </table>
111 111
                </td>
......
118 118
                [% IF ( defaultcurrency && (currency != defaultcurrency) ) %]
119 119
                  <th align=right>[% 'Exchangerate' | $T8 %]</th>
120 120
                  [% IF ( forex ) %]
121
                    <td><input type="hidden" name="exchangerate" value="[% exchangerate %]">[% exchangerate %]</td>
121
                    <td><input type="hidden" name="exchangerate" value="[% exchangerate | html %]">[% exchangerate | html %]</td>
122 122
                  [% ELSE %]
123
                    <td><input type="text" name="exchangerate" size="10" value="[% exchangerate %]"></td>
123
                    <td><input type="text" name="exchangerate" size="10" value="[% exchangerate | html %]"></td>
124 124
                  [% END %]
125 125
                [% END %]
126 126

  
......
146 146
            <table>
147 147
              <tr>
148 148
                <th align="right" nowrap>[% 'Invoice Number' | $T8 %]</th>
149
                <td><input name="invnumber" size="11" value="[% invnumber %]" [% readonly %]></td>
149
                <td><input name="invnumber" size="11" value="[% invnumber | html %]" [% readonly %]></td>
150 150
              </tr>
151 151
              <tr>
152 152
                <th align="right" nowrap>[% 'Order Number' | $T8 %]</th>
153
                <td><input name="ordnumber" size="11" value="[% ordnumber %]" [% readonly %]></td>
153
                <td><input name="ordnumber" size="11" value="[% ordnumber | html %]" [% readonly %]></td>
154 154
              </tr>
155 155
              <tr>
156 156
                <th align="right" nowrap>[% 'Invoice Date' | $T8 %]</th>
......
186 186
          <tr>
187 187
            <td>
188 188
              [% temp = "selectAP_amount_"_ i %][% $temp %]
189
              <input type="hidden" name="tax_[% i %]" value="[% temp = "tax"_ i %][% $temp %]">
189
              <input type="hidden" name="tax_[% i %]" value="[% temp = "tax"_ i %][% $temp | html %]">
190 190
            </td>
191 191
            <td>
192
              <input name="amount_[% i %]" size="10" value="[% temp = "amount_"_ i %][% $temp %]">
192
              <input name="amount_[% i %]" size="10" value="[% temp = "amount_"_ i %][% $temp | html %]">
193 193
            </td>
194 194
            <td>
195
              [% temp = "tax_"_ i %][% $temp %]
195
              [% temp = "tax_"_ i %][% $temp | html %]
196 196
            </td>
197 197
            <td>
198 198
              [% temp = "select_tax_"_ i %][% $temp %]
......
204 204
        [% END %]
205 205

  
206 206
        <tr>
207
          <td colspan=6>
207
          <td colspan="6">
208 208
            <hr noshade>
209 209
          </td>
210 210
        </tr>
211 211
        <tr>
212 212
          <td>[% APselected %]</td>
213
          <th align=left>[% invtotal %]</th>
214
          <td colspan=4></td>
213
          <th align="left">[% invtotal | html %]</th>
214
          <td colspan="4"></td>
215 215
        </tr>
216 216
      </table>
217 217
     </td>
218 218
    </tr>
219 219
    <tr>
220 220
      <td>
221
        <table width=100%>
221
        <table width="100%">
222 222
        <tr>
223
          <th align=left width=1%>[% 'Notes' | $T8 %]</th>
224
          <td align=left>
225
            <textarea name="notes" rows="[% textarea_rows %]" cols="50" wrap="soft" [% readonly %]>[% notes %]</textarea>
223
          <th align="left" width="1%">[% 'Notes' | $T8 %]</th>
224
          <td align="left">
225
            <textarea name="notes" rows="[% textarea_rows %]" cols="50" wrap="soft" [% readonly %]>[% notes | html %]</textarea>
226 226
          </td>
227 227

  
228
          <th align=left width=1%>[% 'Notes for vendor' | $T8 %]</th>
229
          <td align=left>
230
            <textarea name="intnotes" rows="[% textarea_rows %]" cols="50" wrap="soft" readonly>[% intnotes %]</textarea>
228
          <th align="left" width=1%>[% 'Notes for vendor' | $T8 %]</th>
229
          <td align="left">
230
            <textarea name="intnotes" rows="[% textarea_rows %]" cols="50" wrap="soft" readonly>[% intnotes | html %]</textarea>
231 231
          </td>
232 232
        </tr>
233 233
      </table>
......
235 235
  </tr>
236 236
  <tr>
237 237
    <td>
238
      <table width=100%>
239
        <tr class=listheading>
240
          <th class=listheading colspan=7>[% 'Payments' | $T8 %]</th>
238
      <table width="100%">
239
        <tr class="listheading">
240
          <th class="listheading" colspan="7">[% 'Payments' | $T8 %]</th>
241 241
        </tr>
242 242

  
243 243
        <tr>
......
262 262
              [% IF( changeable ) %]
263 263
                [% L.date_tag(temp, $temp) %]
264 264
              [% ELSE %]
265
                [% $temp %]
266
                <input type="hidden" name="[% temp %]" value="[% $temp %]">|;
265
                [% $temp | html %]
266
                <input type="hidden" name="[% temp %]" value="[% $temp | html %]">|;
267 267
              [% END %]
268 268
            </td>
269 269

  
270 270
            [% temp = "source_"_ i %]
271 271
            <td align="center">
272 272
              [% IF( changeable ) %]
273
                <input name="[% temp %]" size="11" value="[% $temp %]">
273
                <input name="[% temp %]" size="11" value="[% $temp | html %]">
274 274
              [% ELSE %]
275
                [% $temp %]
276
                <input type="hidden" name="[% temp %]" value="[% $temp %]">
275
                [% $temp | html %]
276
                <input type="hidden" name="[% temp %]" value="[% $temp | html %]">
277 277
              [% END %]
278 278
            </td>
279 279

  
280 280
            [% temp = "memo_"_ i %]
281 281
            <td align="center">
282 282
              [% IF( changeable ) %]
283
                <input name="[% temp %]" size="11" value="[% $temp %]">
283
                <input name="[% temp %]" size="11" value="[% $temp | html %]">
284 284
              [% ELSE %]
285
                [% $temp %]
286
                <input type="hidden" name="[% temp %]" value="[% $temp %]">
285
                [% $temp | html %]
286
                <input type="hidden" name="[% temp %]" value="[% $temp | html %]">
287 287
              [% END %]
288 288
            </td>
289 289

  
290 290
            [% temp = "paid_"_ i %]
291 291
            <td align="center">
292 292
              [% IF( changeable ) %]
293
                <input name="[% temp %]" size="11" value="[% $temp %]" onBlur="check_right_number_format(this);">
293
                <input name="[% temp %]" size="11" value="[% $temp | html %]" onBlur="check_right_number_format(this);">
294 294
              [% ELSE %]
295
                [% $temp %]
296
                <input type="hidden" name="[% temp %]" value="[% $temp %]">
295
                [% $temp | html %]
296
                <input type="hidden" name="[% temp %]" value="[% $temp | html %]">
297 297
              [% END %]
298 298
            </td>
299 299

  
......
303 303
                [% temp_forex = "forex_"_ i %]
304 304

  
305 305
                [% IF( $temp_forex || !changeable ) %]
306
                  [% $temp %]
307
                  <input type="hidden" name="[% temp %]" value="[% $temp %]">
306
                  [% $temp | html %]
307
                  <input type="hidden" name="[% temp %]" value="[% $temp | html %]">
308 308
                [% ELSE %]
309
                  <input name="[% temp %]" size="11" value="[% $temp %]">
309
                  <input name="[% temp %]" size="11" value="[% $temp | html %]">
310 310
                [% END %]
311 311

  
312
                <input type=hidden name="[% temp_forex %]" value="[% $temp_forex %]">
312
                <input type=hidden name="[% temp_forex %]" value="[% $temp_forex | html %]">
313 313
              </td>
314 314
            [% END %]
315 315

  
......
319 319
                [% temp = "select"_ temp %]
320 320
                [% $temp %]
321 321
              [% ELSE %]
322
                [% $temp %]
323
                <input type="hidden" name="[% temp %]" value="[% $temp %]">
322
                [% $temp | html %]
323
                <input type="hidden" name="[% temp %]" value="[% $temp | html %]">
324 324
              [% END %]
325 325
            </td>
326 326

  
......
330 330
                [% temp = "select"_ temp %]
331 331
                [% $temp %]
332 332
              [% ELSE %]
333
                <input type="hidden" name="[% temp %]" value="[% $temp %]">
333
                <input type="hidden" name="[% temp %]" value="[% $temp | html %]">
334 334
                [% temp = "label"_ temp %]
335
                [% $temp %]
335
                [% $temp | html %]
336 336
              [% END %]
337 337
            </td>
338 338
          </tr>

Auch abrufbar als: Unified diff