Project

General

Profile

« Previous | Next » 

Revision 116

Added by stefan about 20 years ago

Removed strip_slashes_dummy.

View differences:

trunk/wb/admin/pages/settings.php
79 79 
$template->set_block('page', 'main_block', 'main');
80 80 
$template->set_var(array(
81 81 
								'PAGE_ID' => $results_array['page_id'],
82 
								'PAGE_TITLE' => $admin->strip_slashes_dummy($results_array['page_title']),
83 
								'MENU_TITLE' => $admin->strip_slashes_dummy($results_array['menu_title']),
84 
								'DESCRIPTION' => $admin->strip_slashes_dummy($results_array['description']),
85 
								'KEYWORDS' => $admin->strip_slashes_dummy($results_array['keywords']),
82 
								'PAGE_TITLE' => ($results_array['page_title']),
83 
								'MENU_TITLE' => ($results_array['menu_title']),
84 
								'DESCRIPTION' => ($results_array['description']),
85 
								'KEYWORDS' => ($results_array['keywords']),
86 86 
								'MODIFIED_BY' => $user['display_name'],
87 87 
								'MODIFIED_BY_USERNAME' => $user['username'],
88 88 
								'MODIFIED_WHEN' => $modified_ts,
......
251 251 
			for($i = 1; $i <= $page['level']; $i++) { $title_prefix .= ' - '; }
252 252 
			$template->set_var(array(
253 253 
											'ID' => $page['page_id'],
254 
											'TITLE' => $admin->strip_slashes_dummy($title_prefix.$page['page_title'])
254 
											'TITLE' => ($title_prefix.$page['page_title'])
255 255 
											)
256 256 
									);
257 257 
			if($results_array['parent'] == $page['page_id']) {
trunk/wb/admin/pages/index.php
150 150 
				</td>
151 151 
				<?php if($admin->get_permission('pages_modify') == true AND $can_modify == true) { ?>
152 152 
				<td>
153 
					<a href="<?php echo ADMIN_URL; ?>/pages/modify.php?page_id=<?php echo $page['page_id']; ?>" title="<?php echo $TEXT['MODIFY']; ?>"><?php echo $admin->strip_slashes_dummy($page['page_title']); ?></a>
153 
					<a href="<?php echo ADMIN_URL; ?>/pages/modify.php?page_id=<?php echo $page['page_id']; ?>" title="<?php echo $TEXT['MODIFY']; ?>"><?php echo ($page['page_title']); ?></a>
154 154 
				</td>
155 155 
				<?php } else { ?>
156 156 
				<td>
157 
					<?php	echo $admin->strip_slashes_dummy($page['page_title']); ?>
157 
					<?php	echo ($page['page_title']); ?>
158 158 
				</td>
159 159 
				<?php } ?>
160 160 
				<td align="left" width="232">
161 
					<font color="#999999"><?php echo $admin->strip_slashes_dummy($page['menu_title']); ?></font>
161 
					<font color="#999999"><?php echo ($page['menu_title']); ?></font>
162 162 
				</td>
163 163 
				<td align="center" valign="middle" width="90">
164 164 
				<?php if($page['visibility'] == 'public') { ?>
......
446 446 
			for($i = 1; $i <= $page['level']; $i++) { $title_prefix .= ' - '; }
447 447 
				$template->set_var(array(
448 448 
												'ID' => $page['page_id'],
449 
												'TITLE' => $admin->strip_slashes_dummy($title_prefix.$page['page_title'])
449 
												'TITLE' => ($title_prefix.$page['page_title'])
450 450 
												)
451 451 
										);
452 452 
				if($can_modify == true) {
trunk/wb/admin/pages/trash.php
141 141 
				</td>
142 142 
				<?php if($admin->get_permission('pages_modify') == true AND $can_modify == true AND $page['visibility'] != 'heading') { ?>
143 143 
				<td>
144 
					<a href="<?php echo ADMIN_URL; ?>/pages/modify.php?page_id=<?php echo $page['page_id']; ?>" title="<?php echo $TEXT['MODIFY']; ?>"><?php echo $admin->strip_slashes_dummy($page['page_title']); ?></a>
144 
					<a href="<?php echo ADMIN_URL; ?>/pages/modify.php?page_id=<?php echo $page['page_id']; ?>" title="<?php echo $TEXT['MODIFY']; ?>"><?php echo ($page['page_title']); ?></a>
145 145 
				</td>
146 146 
				<?php } else { ?>
147 147 
				<td>
148 148 
					<?php
149 149 
					if($page['visibility'] != 'heading') {
150 
						echo $admin->strip_slashes_dummy($page['page_title']);
150 
						echo ($page['page_title']);
151 151 
					} else {
152 
						echo '<b>'.$admin->strip_slashes_dummy($page['page_title']).'</b>';
152 
						echo '<b>'.($page['page_title']).'</b>';
153 153 
					}
154 154 
					?>
155 155 
				</td>
trunk/wb/admin/pages/sections.php
134 134 
	</td>
135 135 
	<td align="right">
136 136 
		<?php echo $TEXT['CURRENT_PAGE']; ?>:
137 
		<b><?php echo $admin->strip_slashes_dummy($results_array['page_title']); ?></b>
137 
		<b><?php echo ($results_array['page_title']); ?></b>
138 138 
		-
139 139 
		<a href="<?php echo ADMIN_URL; ?>/pages/modify.php?page_id=<?php echo $page_id; ?>"><?php echo $HEADING['MODIFY_PAGE']; ?></a>
140 140 
		-
trunk/wb/admin/pages/modify.php
81 81 
$template->set_block('page', 'main_block', 'main');
82 82 
$template->set_var(array(
83 83 
								'PAGE_ID' => $results_array['page_id'],
84 
								'PAGE_TITLE' => $admin->strip_slashes_dummy($results_array['page_title']),
84 
								'PAGE_TITLE' => ($results_array['page_title']),
85 85 
								'MODIFIED_BY' => $user['display_name'],
86 86 
								'MODIFIED_BY_USERNAME' => $user['username'],
87 87 
								'MODIFIED_WHEN' => $modified_ts,
trunk/wb/admin/settings/index.php
53 53 
$results = $database->query($query);
54 54 
while($setting = $results->fetchRow()) {
55 55 
	$setting_name = $setting['name'];
56 
	$setting_value = htmlspecialchars($admin->strip_slashes_dummy($setting['value']));
56 
	$setting_value = htmlspecialchars(($setting['value']));
57 57 
	switch($setting_name) {
58 58 
		// Search header
59 59 
		case 'header':
trunk/wb/modules/wrapper/modify.php
32 32 
$query = "SELECT url,height FROM ".TABLE_PREFIX."mod_wrapper WHERE section_id = '$section_id'";
33 33 
$get_settings = $database->query($query);
34 34 
$settings = $get_settings->fetchRow();
35 
$url = $admin->strip_slashes_dummy($settings['url']);
35 
$url = ($settings['url']);
36 36 
$height = $settings['height'];
37 37 

  		




  38
  38
  
    
// Insert vars


  		












  

    
      trunk/wb/modules/menu_link/modify.php
    
  





  32
  32
  
    
$query_info = "SELECT link,target FROM ".TABLE_PREFIX."pages WHERE page_id = '$page_id'";


  		




  33
  33
  
    
$get_info = $database->query($query_info);


  		




  34
  34
  
    
$fetch_info = $get_info->fetchRow();


  		




  35
  
  
    
$link = $admin->strip_slashes_dummy($fetch_info['link']);


  		




  
  35
  
    
$link = ($fetch_info['link']);


  		




  36
  36
  
    
$target = $fetch_info['target'];


  		




  37
  37
  
    

  		




  38
  38
  
    
// Insert vars


  		












  

    
      trunk/wb/modules/wysiwyg/modify.php
    
  





  29
  29
  
    
$query = "SELECT content FROM ".TABLE_PREFIX."mod_wysiwyg WHERE section_id = '$section_id'";


  		




  30
  30
  
    
$get_content = $database->query($query);


  		




  31
  31
  
    
$content = $get_content->fetchRow();


  		




  32
  
  
    
$content = $admin->strip_slashes_dummy(htmlspecialchars($content['content']));


  		




  
  32
  
    
$content = (htmlspecialchars($content['content']));


  		




  33
  33
  
    

  		




  34
  34
  
    
if(!isset($wysiwyg_editor_loaded)) {


  		




  35
  35
  
    
	$wysiwyg_editor_loaded=true;


  		












  

    
      trunk/wb/modules/form/modify_field.php
    
  





  63
  63
  
    
<tr>


  		




  64
  64
  
    
	<td width="80"><?php echo $TEXT['TITLE']; ?>:</td>


  		




  65
  65
  
    
	<td>


  		




  66
  
  
    
		<input type="text" name="title" value="<?php echo htmlspecialchars($admin->strip_slashes_dummy($form['title'])); ?>" style="width: 100%;" maxlength="255" />


  		




  
  66
  
    
		<input type="text" name="title" value="<?php echo htmlspecialchars(($form['title'])); ?>" style="width: 100%;" maxlength="255" />


  		




  67
  67
  
    
	</td>


  		




  68
  68
  
    
</tr>


  		




  69
  69
  
    
<tr>


  		




  ......




  86
  86
  
    
	<tr>


  		




  87
  87
  
    
		<td valign="top"><?php echo $TEXT['TEMPLATE']; ?>:</td>


  		




  88
  88
  
    
		<td>


  		




  89
  
  
    
		<textarea name="template" style="width: 100%; height: 20px;"><?php echo htmlspecialchars($admin->strip_slashes_dummy($form['extra'])); ?></textarea>


  		




  
  89
  
    
		<textarea name="template" style="width: 100%; height: 20px;"><?php echo htmlspecialchars(($form['extra'])); ?></textarea>


  		




  90
  90
  
    
		</td>


  		




  91
  91
  
    
	</tr>


  		




  92
  92
  
    
	<?php } elseif($type == 'textfield') { ?>


  		












  

    
      trunk/wb/modules/form/modify_settings.php
    
  





  58
  58
  
    
<tr>


  		




  59
  59
  
    
	<td class="setting_name" width="220"><?php echo $TEXT['HEADER']; ?>:</td>


  		




  60
  60
  
    
	<td class="setting_name">


  		




  61
  
  
    
		<textarea name="header" style="width: 100%; height: 80px;"><?php echo $admin->strip_slashes_dummy($setting['header']); ?></textarea>


  		




  
  61
  
    
		<textarea name="header" style="width: 100%; height: 80px;"><?php echo ($setting['header']); ?></textarea>


  		




  62
  62
  
    
	</td>


  		




  63
  63
  
    
</tr>


  		




  64
  64
  
    
<tr>


  		




  65
  65
  
    
	<td class="setting_name"><?php echo $TEXT['FIELD'].' '.$TEXT['LOOP']; ?>:</td>


  		




  66
  66
  
    
	<td class="setting_name">


  		




  67
  
  
    
		<textarea name="field_loop" style="width: 100%; height: 60px;"><?php echo $admin->strip_slashes_dummy($setting['field_loop']); ?></textarea>


  		




  
  67
  
    
		<textarea name="field_loop" style="width: 100%; height: 60px;"><?php echo ($setting['field_loop']); ?></textarea>


  		




  68
  68
  
    
	</td>


  		




  69
  69
  
    
</tr>


  		




  70
  70
  
    
<tr>


  		




  71
  71
  
    
	<td class="setting_name"><?php echo $TEXT['FOOTER']; ?>:</td>


  		




  72
  72
  
    
	<td class="setting_name">


  		




  73
  
  
    
		<textarea name="footer" style="width: 100%; height: 80px;"><?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($setting['footer'])); ?></textarea>


  		




  
  73
  
    
		<textarea name="footer" style="width: 100%; height: 80px;"><?php echo str_replace($raw, $friendly, ($setting['footer'])); ?></textarea>


  		




  74
  74
  
    
	</td>


  		




  75
  75
  
    
</tr>


  		




  76
  76
  
    
<tr>


  		




  77
  77
  
    
	<td class="setting_name"><?php echo $TEXT['EMAIL'].' '.$TEXT['TO']; ?>:</td>


  		




  78
  78
  
    
	<td class="setting_name">


  		




  79
  
  
    
		<textarea name="email_to" style="width: 100%; height: 30px;"><?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($setting['email_to'])); ?></textarea>


  		




  
  79
  
    
		<textarea name="email_to" style="width: 100%; height: 30px;"><?php echo str_replace($raw, $friendly, ($setting['email_to'])); ?></textarea>


  		




  80
  80
  
    
	</td>


  		




  81
  81
  
    
</tr>


  		




  82
  82
  
    
<tr>


  		




  ......




  85
  85
  
    
		<select name="email_from_field" style="width: 100%;">


  		




  86
  86
  
    
			<option value="" onclick="javascript: document.getElementById('email_from').style.display = 'block';"><?php echo $TEXT['CUSTOM']; ?>:</option>


  		




  87
  87
  
    
			<?php


  		




  88
  
  
    
			$email_from_value = str_replace($raw, $friendly, $admin->strip_slashes_dummy($setting['email_from']));


  		




  
  88
  
    
			$email_from_value = str_replace($raw, $friendly, ($setting['email_from']));


  		




  89
  89
  
    
			$query_email_fields = $database->query("SELECT field_id,title FROM ".TABLE_PREFIX."mod_form_fields ORDER BY position ASC");


  		




  90
  90
  
    
			if($query_email_fields->numRows() > 0) {


  		




  91
  91
  
    
				while($field = $query_email_fields->fetchRow()) {


  		




  ......




  104
  104
  
    
<tr>


  		




  105
  105
  
    
	<td class="setting_name"><?php echo $TEXT['EMAIL'].' '.$TEXT['SUBJECT']; ?>:</td>


  		




  106
  106
  
    
	<td class="setting_name">


  		




  107
  
  
    
		<input type="text" name="email_subject" style="width: 100%;" maxlength="255" value="<?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($setting['email_subject'])); ?>" />


  		




  
  107
  
    
		<input type="text" name="email_subject" style="width: 100%;" maxlength="255" value="<?php echo str_replace($raw, $friendly, ($setting['email_subject'])); ?>" />


  		




  108
  108
  
    
	</td>


  		




  109
  109
  
    
</tr>


  		




  110
  110
  
    
<tr>


  		




  111
  111
  
    
	<td class="setting_name"><?php echo $TEXT['SUCCESS'].' '.$TEXT['MESSAGE']; ?>:</td>


  		




  112
  112
  
    
	<td class="setting_name">


  		




  113
  
  
    
		<textarea name="success_message" style="width: 100%; height: 80px;"><?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($setting['success_message'])); ?></textarea>


  		




  
  113
  
    
		<textarea name="success_message" style="width: 100%; height: 80px;"><?php echo str_replace($raw, $friendly, ($setting['success_message'])); ?></textarea>


  		




  114
  114
  
    
	</td>


  		




  115
  115
  
    
</tr>


  		




  116
  116
  
    
<tr>


  		




  117
  117
  
    
	<td class="setting_name"><?php echo $TEXT['MAX_SUBMISSIONS_PER_HOUR']; ?>:</td>


  		




  118
  118
  
    
	<td class="setting_name">


  		




  119
  
  
    
		<input type="text" name="max_submissions" style="width: 100%;" maxlength="255" value="<?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($setting['max_submissions'])); ?>" />


  		




  
  119
  
    
		<input type="text" name="max_submissions" style="width: 100%;" maxlength="255" value="<?php echo str_replace($raw, $friendly, ($setting['max_submissions'])); ?>" />


  		




  120
  120
  
    
	</td>


  		




  121
  121
  
    
</tr>


  		




  122
  122
  
    
<tr>


  		




  123
  123
  
    
	<td class="setting_name"><?php echo $TEXT['SUBMISSIONS_STORED_IN_DATABASE']; ?>:</td>


  		




  124
  124
  
    
	<td class="setting_name">


  		




  125
  
  
    
		<input type="text" name="stored_submissions" style="width: 100%;" maxlength="255" value="<?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($setting['stored_submissions'])); ?>" />


  		




  
  125
  
    
		<input type="text" name="stored_submissions" style="width: 100%;" maxlength="255" value="<?php echo str_replace($raw, $friendly, ($setting['stored_submissions'])); ?>" />


  		




  126
  126
  
    
	</td>


  		




  127
  127
  
    
</tr>


  		




  128
  128
  
    
</table>


  		












  

    
      trunk/wb/modules/form/view_submission.php
    
  





  75
  75
  
    
</tr>


  		




  76
  76
  
    
<tr>


  		




  77
  77
  
    
	<td colspan="2">


  		




  78
  
  
    
		<?php echo $admin->strip_slashes_dummy(str_replace('\n', '<br />', $submission['body'])); ?>


  		




  
  78
  
    
		<?php echo (str_replace('\n', '<br />', $submission['body'])); ?>


  		




  79
  79
  
    
	</td>


  		




  80
  80
  
    
</tr>


  		




  81
  81
  
    
</table>


  		












  

    
      trunk/wb/modules/code/modify.php
    
  





  32
  32
  
    
$query = "SELECT content FROM ".TABLE_PREFIX."mod_code WHERE section_id = '$section_id'";


  		




  33
  33
  
    
$get_content = $database->query($query);


  		




  34
  34
  
    
$content = $get_content->fetchRow();


  		




  35
  
  
    
$content = $admin->strip_slashes_dummy(htmlspecialchars($content['content']));


  		




  
  35
  
    
$content = (htmlspecialchars($content['content']));


  		




  36
  36
  
    

  		




  37
  37
  
    
// Insert vars


  		




  38
  38
  
    
$template->set_var(array(


  		












  

    
      trunk/wb/modules/news/modify_post.php
    
  





  60
  60
  
    
<tr>


  		




  61
  61
  
    
	<td width="80"><?php echo $TEXT['TITLE']; ?>:</td>


  		




  62
  62
  
    
	<td>


  		




  63
  
  
    
		<input type="text" name="title" value="<?php echo $admin->strip_slashes_dummy(htmlspecialchars($fetch_content['title'])); ?>" style="width: 100%;" maxlength="255" />


  		




  
  63
  
    
		<input type="text" name="title" value="<?php echo (htmlspecialchars($fetch_content['title'])); ?>" style="width: 100%;" maxlength="255" />


  		




  64
  64
  
    
	</td>


  		




  65
  65
  
    
</tr>


  		




  66
  66
  
    
<tr>


  		












  

    
      trunk/wb/modules/news/modify_group.php
    
  





  51
  51
  
    
<tr>


  		




  52
  52
  
    
	<td width="80"><?php echo $TEXT['TITLE']; ?>:</td>


  		




  53
  53
  
    
	<td>


  		




  54
  
  
    
		<input type="text" name="title" value="<?php echo $admin->strip_slashes_dummy(htmlspecialchars($fetch_content['title'])); ?>" style="width: 100%;" maxlength="255" />


  		




  
  54
  
    
		<input type="text" name="title" value="<?php echo (htmlspecialchars($fetch_content['title'])); ?>" style="width: 100%;" maxlength="255" />


  		




  55
  55
  
    
	</td>


  		




  56
  56
  
    
</tr>


  		




  57
  57
  
    
<tr>


  		












  

    
      trunk/wb/modules/news/modify_settings.php
    
  





  53
  53
  
    
<tr>


  		




  54
  54
  
    
	<td class="setting_name" width="100"><?php echo $TEXT['HEADER']; ?>:</td>


  		




  55
  55
  
    
	<td class="setting_name">


  		




  56
  
  
    
		<textarea name="header" style="width: 100%; height: 80px;"><?php echo $admin->strip_slashes_dummy($fetch_content['header']); ?></textarea>


  		




  
  56
  
    
		<textarea name="header" style="width: 100%; height: 80px;"><?php echo ($fetch_content['header']); ?></textarea>


  		




  57
  57
  
    
	</td>


  		




  58
  58
  
    
</tr>


  		




  59
  59
  
    
<tr>


  		




  60
  60
  
    
	<td class="setting_name"><?php echo $TEXT['POST'].' '.$TEXT['LOOP']; ?>:</td>


  		




  61
  61
  
    
	<td class="setting_name">


  		




  62
  
  
    
		<textarea name="post_loop" style="width: 100%; height: 60px;"><?php echo $admin->strip_slashes_dummy($fetch_content['post_loop']); ?></textarea>


  		




  
  62
  
    
		<textarea name="post_loop" style="width: 100%; height: 60px;"><?php echo ($fetch_content['post_loop']); ?></textarea>


  		




  63
  63
  
    
	</td>


  		




  64
  64
  
    
</tr>


  		




  65
  65
  
    
<tr>


  		




  66
  66
  
    
	<td class="setting_name"><?php echo $TEXT['FOOTER']; ?>:</td>


  		




  67
  67
  
    
	<td class="setting_name">


  		




  68
  
  
    
		<textarea name="footer" style="width: 100%; height: 80px;"><?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($fetch_content['footer'])); ?></textarea>


  		




  
  68
  
    
		<textarea name="footer" style="width: 100%; height: 80px;"><?php echo str_replace($raw, $friendly, ($fetch_content['footer'])); ?></textarea>


  		




  69
  69
  
    
	</td>


  		




  70
  70
  
    
</tr>


  		




  71
  71
  
    
<tr>


  		




  72
  72
  
    
	<td class="setting_name"><?php echo $TEXT['POST_HEADER']; ?>:</td>


  		




  73
  73
  
    
	<td class="setting_name">


  		




  74
  
  
    
		<textarea name="post_header" style="width: 100%; height: 60px;"><?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($fetch_content['post_header'])); ?></textarea>


  		




  
  74
  
    
		<textarea name="post_header" style="width: 100%; height: 60px;"><?php echo str_replace($raw, $friendly, ($fetch_content['post_header'])); ?></textarea>


  		




  75
  75
  
    
	</td>


  		




  76
  76
  
    
</tr>


  		




  77
  77
  
    
<tr>


  		




  78
  78
  
    
	<td class="setting_name"><?php echo $TEXT['POST_FOOTER']; ?>:</td>


  		




  79
  79
  
    
	<td class="setting_name">


  		




  80
  
  
    
		<textarea name="post_footer" style="width: 100%; height: 60px;"><?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($fetch_content['post_footer'])); ?></textarea>


  		




  
  80
  
    
		<textarea name="post_footer" style="width: 100%; height: 60px;"><?php echo str_replace($raw, $friendly, ($fetch_content['post_footer'])); ?></textarea>


  		




  81
  81
  
    
	</td>


  		




  82
  82
  
    
</tr>


  		




  83
  83
  
    
<tr>


  		




  ......




  130
  130
  
    
<tr>


  		




  131
  131
  
    
	<td class="setting_name"><?php echo $TEXT['COMMENTS'].' '.$TEXT['HEADER']; ?>:</td>


  		




  132
  132
  
    
	<td class="setting_name">


  		




  133
  
  
    
		<textarea name="comments_header" style="width: 100%; height: 60px;"><?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($fetch_content['comments_header'])); ?></textarea>


  		




  
  133
  
    
		<textarea name="comments_header" style="width: 100%; height: 60px;"><?php echo str_replace($raw, $friendly, ($fetch_content['comments_header'])); ?></textarea>


  		




  134
  134
  
    
	</td>


  		




  135
  135
  
    
</tr>


  		




  136
  136
  
    
<tr>


  		




  137
  137
  
    
	<td class="setting_name"><?php echo $TEXT['COMMENTS'].' '.$TEXT['LOOP']; ?>:</td>


  		




  138
  138
  
    
	<td class="setting_name">


  		




  139
  
  
    
		<textarea name="comments_loop" style="width: 100%; height: 60px;"><?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($fetch_content['comments_loop'])); ?></textarea>


  		




  
  139
  
    
		<textarea name="comments_loop" style="width: 100%; height: 60px;"><?php echo str_replace($raw, $friendly, ($fetch_content['comments_loop'])); ?></textarea>


  		




  140
  140
  
    
	</td>


  		




  141
  141
  
    
</tr>


  		




  142
  142
  
    
<tr>


  		




  143
  143
  
    
	<td class="setting_name"><?php echo $TEXT['COMMENTS'].' '.$TEXT['FOOTER']; ?>:</td>


  		




  144
  144
  
    
	<td class="setting_name">


  		




  145
  
  
    
		<textarea name="comments_footer" style="width: 100%; height: 60px;"><?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($fetch_content['comments_footer'])); ?></textarea>


  		




  
  145
  
    
		<textarea name="comments_footer" style="width: 100%; height: 60px;"><?php echo str_replace($raw, $friendly, ($fetch_content['comments_footer'])); ?></textarea>


  		




  146
  146
  
    
	</td>


  		




  147
  147
  
    
</tr>


  		




  148
  148
  
    
<tr>


  		




  149
  149
  
    
	<td class="setting_name"><?php echo $TEXT['COMMENTS'].' '.$TEXT['PAGE']; ?>:</td>


  		




  150
  150
  
    
	<td class="setting_name">


  		




  151
  
  
    
		<textarea name="comments_page" style="width: 100%; height: 80px;"><?php echo str_replace($raw, $friendly, $admin->strip_slashes_dummy($fetch_content['comments_page'])); ?></textarea>


  		




  
  151
  
    
		<textarea name="comments_page" style="width: 100%; height: 80px;"><?php echo str_replace($raw, $friendly, ($fetch_content['comments_page'])); ?></textarea>


  		




  152
  152
  
    
	</td>


  		




  153
  153
  
    
</tr>


  		




  154
  154
  
    
</table>


  		












  

    
      trunk/wb/modules/news/modify_comment.php
    
  





  52
  52
  
    
<tr>


  		




  53
  53
  
    
	<td width="80"><?php echo $TEXT['TITLE']; ?>:</td>


  		




  54
  54
  
    
	<td>


  		




  55
  
  
    
		<input type="text" name="title" value="<?php echo $admin->strip_slashes_dummy(htmlspecialchars($fetch_content['title'])); ?>" style="width: 100%;" maxlength="255" />


  		




  
  55
  
    
		<input type="text" name="title" value="<?php echo (htmlspecialchars($fetch_content['title'])); ?>" style="width: 100%;" maxlength="255" />


  		




  56
  56
  
    
	</td>


  		




  57
  57
  
    
</tr>


  		




  58
  58
  
    
<tr>


  		




  59
  59
  
    
	<td valign="top"><?php echo $TEXT['COMMENT']; ?>:</td>


  		




  60
  60
  
    
	<td>


  		




  61
  
  
    
		<textarea name="comment" style="width: 100%; height: 150px;"><?php echo $admin->strip_slashes_dummy(htmlspecialchars($fetch_content['comment'])); ?></textarea>


  		




  
  61
  
    
		<textarea name="comment" style="width: 100%; height: 150px;"><?php echo (htmlspecialchars($fetch_content['comment'])); ?></textarea>


  		




  62
  62
  
    
	</td>


  		




  63
  63
  
    
</tr>


  		




  64
  64
  
    
</table>


  		












  

    
      trunk/wb/modules/news/modify.php
    
  





  65
  65
  
    
			</td>


  		




  66
  66
  
    
			<td>


  		




  67
  67
  
    
				<a href="<?php echo WB_URL; ?>/modules/news/modify_post.php?page_id=<?php echo $page_id; ?>&section_id=<?php echo $section_id; ?>&post_id=<?php echo $post['post_id']; ?>">


  		




  68
  
  
    
					<?php echo $admin->strip_slashes_dummy($post['title']); ?>


  		




  
  68
  
    
					<?php echo ($post['title']); ?>


  		




  69
  69
  
    
				</a>


  		




  70
  70
  
    
			</td>


  		




  71
  71
  
    
			<td width="180">


  		




  ......




  74
  74
  
    
				$query_title = $database->query("SELECT title FROM ".TABLE_PREFIX."mod_news_groups WHERE group_id = '".$post['group_id']."'");


  		




  75
  75
  
    
				if($query_title->numRows() > 0) {


  		




  76
  76
  
    
					$fetch_title = $query_title->fetchRow();


  		




  77
  
  
    
					echo $admin->strip_slashes_dummy($fetch_title['title']);


  		




  
  77
  
    
					echo ($fetch_title['title']);


  		




  78
  78
  
    
				} else {


  		




  79
  79
  
    
					echo $TEXT['NONE'];


  		




  80
  80
  
    
				}


  		












  

    
      trunk/wb/modules/admin.php
    
  





  126
  126
  
    
$template->set_block('page', 'main_block', 'main');


  		




  127
  127
  
    
$template->set_var(array(


  		




  128
  128
  
    
								'PAGE_ID' => $results_array['page_id'],


  		




  129
  
  
    
								'PAGE_TITLE' => $admin->strip_slashes_dummy($results_array['page_title']),


  		




  
  129
  
    
								'PAGE_TITLE' => ($results_array['page_title']),


  		




  130
  130
  
    
								'MODIFIED_BY' => $user['display_name'],


  		




  131
  131
  
    
								'MODIFIED_BY_USERNAME' => $user['username'],


  		




  132
  132
  
    
								'MODIFIED_WHEN' => $modified_ts,


  		












  

    
      trunk/wb/framework/class.wb.php
    
  





  91
  91
  
    
		return $output;


  		




  92
  92
  
    
	}


  		




  93
  93
  
    

  		




  94
  
  
    
	function strip_slashes_dummy($input) {


  		




  95
  
  
    
		return $input;


  		




  96
  
  
    
	}


  		




  97
  
  
    

  		




  98
  94
  
    
	// Escape backslashes for use with mySQL LIKE strings


  		




  99
  95
  
    
	function escape_backslashes($input) {


  		




  100
  96
  
    
		return str_replace("\\","\\\\",$input);


  		












  

    
      trunk/wb/framework/functions.php
    
  





  630
  630
  
    
	$parent = $results_array['parent'];


  		




  631
  631
  
    
	$level = $results_array['level'];


  		




  632
  632
  
    
	$link = $results_array['link'];


  		




  633
  
  
    
	$page_title = $admin->strip_slashes_dummy($results_array['page_title']);


  		




  634
  
  
    
	$menu_title = $admin->strip_slashes_dummy($results_array['menu_title']);


  		




  
  633
  
    
	$page_title = ($results_array['page_title']);


  		




  
  634
  
    
	$menu_title = ($results_array['menu_title']);


  		




  635
  635
  
    
	


  		




  636
  636
  
    
	// Get the sections that belong to the page


  		




  637
  637
  
    
	$query_sections = $database->query("SELECT section_id,module FROM ".TABLE_PREFIX."sections WHERE page_id = '$page_id'");


  		












Also available in:  Unified diff