edekakam/OpenXE
1
0
Fork 0
mirror of https://github.com/OpenXE-org/OpenXE.git synced 2025-03-30 18:10:23 +02:00
Code Issues Projects Releases Wiki Activity

Ticket system fix display of user edited fields wth htmlentities

Browse Source
This commit is contained in:
Xenomporio 2022-08-04 17:58:09 +02:00
parent b57362ecba
commit e1e886e8e6
1 changed files with 12 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
www/pages/ticket.php
View File

@ -278,21 +278,21 @@ class Ticket {
if (!$showdrafts) { if (!$showdrafts) {
continue; continue;
} }
$this->app->Tpl->Set("NACHRICHT_BETREFF",$message['betreff']." (Entwurf)"); $this->app->Tpl->Set("NACHRICHT_BETREFF",htmlentities($message['betreff']." (Entwurf)"));
} else { } else {
$this->app->Tpl->Set("NACHRICHT_BETREFF",$message['betreff']); $this->app->Tpl->Set("NACHRICHT_BETREFF",htmlentities($message['betreff']));
} }
$this->app->Tpl->Set("NACHRICHT_SENDER",htmlentities($message['verfasser']." <".$message['mail_replyto'].">")); $this->app->Tpl->Set("NACHRICHT_SENDER",htmlentities($message['verfasser']." <".$message['mail_replyto'].">"));
$this->app->Tpl->Set("NACHRICHT_RECIPIENTS",htmlentities($message['mail'])); $this->app->Tpl->Set("NACHRICHT_RECIPIENTS",htmlentities($message['mail']));
$this->app->Tpl->Set("NACHRICHT_CC_RECIPIENTS",htmlentities($message['mail_cc'])); $this->app->Tpl->Set("NACHRICHT_CC_RECIPIENTS",htmlentities($message['mail_cc']));
$this->app->Tpl->Set("NACHRICHT_FLOAT","right"); $this->app->Tpl->Set("NACHRICHT_FLOAT","right");
$this->app->Tpl->Set("NACHRICHT_ZEIT",$message['zeitausgang']); $this->app->Tpl->Set("NACHRICHT_ZEIT",$message['zeitausgang']);
$this->app->Tpl->Set("NACHRICHT_NAME",$message['verfasser']); $this->app->Tpl->Set("NACHRICHT_NAME",htmlentities($message['verfasser']));
} else { } else {
$this->app->Tpl->Set("NACHRICHT_SENDER",$message['mail']." (".$message['verfasser'].")"); $this->app->Tpl->Set("NACHRICHT_SENDER",htmlentities($message['verfasser']." <".$message['mail'].">"));
$this->app->Tpl->Set("NACHRICHT_RECIPIENTS",$message['mail_recipients']); $this->app->Tpl->Set("NACHRICHT_RECIPIENTS",htmlentities($message['mail_recipients']));
$this->app->Tpl->Set("NACHRICHT_CC_RECIPIENTS",$message['mail_cc_recipients']); $this->app->Tpl->Set("NACHRICHT_CC_RECIPIENTS",htmlentities($message['mail_cc_recipients']));
$this->app->Tpl->Set("NACHRICHT_BETREFF",$message['betreff']); $this->app->Tpl->Set("NACHRICHT_BETREFF",htmlentities($message['betreff']));
$this->app->Tpl->Set("NACHRICHT_FLOAT","left"); $this->app->Tpl->Set("NACHRICHT_FLOAT","left");
$this->app->Tpl->Set("NACHRICHT_ZEIT",$message['zeit']); $this->app->Tpl->Set("NACHRICHT_ZEIT",$message['zeit']);
} }
@ -488,10 +488,10 @@ class Ticket {
} }
// Load the draft for editing // Load the draft for editing
$this->app->Tpl->Set('EMAIL_AN', $drafted_messages[0]['mail']); $this->app->Tpl->Set('EMAIL_AN', htmlentities($drafted_messages[0]['mail']));
$this->app->Tpl->Set('EMAIL_CC', $drafted_messages[0]['mail_cc']); $this->app->Tpl->Set('EMAIL_CC', htmlentities($drafted_messages[0]['mail_cc']));
$this->app->Tpl->Set('EMAIL_BCC', $drafted_messages[0]['mail_bcc']); $this->app->Tpl->Set('EMAIL_BCC', htmlentities($drafted_messages[0]['mail_bcc']));
$this->app->Tpl->Set('EMAIL_BETREFF', $drafted_messages[0]['betreff']); $this->app->Tpl->Set('EMAIL_BETREFF', htmlentities($drafted_messages[0]['betreff']));
$this->app->Tpl->Set('EMAIL_TEXT',$drafted_messages[0]['text']); $this->app->Tpl->Set('EMAIL_TEXT',$drafted_messages[0]['text']);
// Show new message dialog // Show new message dialog
@ -551,7 +551,7 @@ class Ticket {
if (empty($drafted_messages)) { if (empty($drafted_messages)) {
// Create new message and save it for editing // Create new message and save it for editing
$this->app->Tpl->Set('EMAIL_AN', $recv_messages[0]['mail']); $this->app->Tpl->Set('EMAIL_AN', htmlentities($recv_messages[0]['mail']));
$senderName = $this->app->User->GetName()." (".$this->app->erp->GetFirmaAbsender().")"; $senderName = $this->app->User->GetName()." (".$this->app->erp->GetFirmaAbsender().")";
$senderAddress = $this->app->erp->GetFirmaMail(); $senderAddress = $this->app->erp->GetFirmaMail();