} else {
//everyone else cannot modify these fields
$priority=$this->getPriority();
- $summary=addslashes($this->getSummary());
- $description=addslashes($this->getDetails());
+ $summary=$this->getSummary();
+ $description=$this->getDetails();
$canned_response=100;
$new_artifact_type_id=$this->ArtifactType->getID();
$assigned_to=$this->getAssignedTo();
$res = $this->ArtifactType->getTechnicians();
$arr =& util_result_column_to_array($res,0);
if (!in_array($assigned_to, $arr)) {
- $this->setError("Invalid assigned_to (not member of the project)");
+ $this->setError("Invalid assigned_to (assigned person is not a technician)");
return false;
}
}
$changes['assigned_to'] = 1;
$update = true;
}
- if ($summary && ($this->getSummary() != htmlspecialchars(stripslashes($summary)))) {
+ if ($summary && ($this->getSummary() != htmlspecialchars($summary))) {
$this->addHistory('summary', $this->getSummary());
$changes['summary'] = 1;
$update = true;
}
- if ($description && ($this->getDetails() != htmlspecialchars(stripslashes($description)))) {
+ if ($description && ($this->getDetails() != htmlspecialchars($description))) {
$this->addHistory('details', $this->getDetails());
$changes['details'] = 1;
$update = true;
if (isset($feedback)) {
- print "<p><span class=\"error\">$feedback";
+ print "<div class=\"error\">$feedback";
if (isset($register_error)) {
print " $register_error";
}
- print "</span>";
+ print "</div>";
}
if (!isset($timezone) || empty($timezone) || !preg_match('/^[-a-zA-Z0-9_\/\.+]+$/', $timezone)) {
$timezone = (isset($sys_default_timezone) ? $sys_default_timezone : 'GMT');
</p
><p>
<?php echo _('Title:'); ?><br />
-<input type="text" name="title" value="<?php echo htmlspecialchars(stripslashes($title)); ?>" size="10" />
+<input type="text" name="title" value="<?php echo htmlspecialchars($title); ?>" size="10" />
</p>
<p>
<?php echo _('First Name:'); echo utils_requiredField(); ?><br />
-<input size="30" type="text" name="firstname" value="<?php print(htmlspecialchars(stripslashes($firstname))); ?>" />
+<input size="30" type="text" name="firstname" value="<?php print(htmlspecialchars($firstname)); ?>" />
</p>
<p>
<?php echo _('Last Name:'); echo utils_requiredField(); ?><br />
-<input size="30" type="text" name="lastname" value="<?php print(htmlspecialchars(stripslashes($lastname))); ?>" />
+<input size="30" type="text" name="lastname" value="<?php print(htmlspecialchars($lastname)); ?>" />
</p>
<p>
<?php echo _('Language Choice:'); ?><br />
</p>
<p>
@<?php printf(_('Email Address:<span class="important">*</span><br /><em>This email address will be verified before account activation. You will receive a mail forward account at <loginname@%1$s> that will forward to this address.</em>'), $GLOBALS['sys_users_host']); ?>
-<br /><input size="30" type="text" name="email" value="<?php print(htmlspecialchars(stripslashes($email))); ?>" />
+<br /><input size="30" type="text" name="email" value="<?php print(htmlspecialchars($email)); ?>" />
</p>
<p>
<?php
if ($sys_use_jabber) {
echo _('Jabber Address:').'<br />
<input size="30" type="text" name="jabber_address" value="'.
- htmlspecialchars(stripslashes($jabber_address)) .'" /><br />
+ htmlspecialchars($jabber_address) .'" /><br />
<input type="checkbox" name="jabber_only" value="1" />
'._('Send auto-generated notices only to my Jabber address').'.';
}
</p>
<p>
<?php echo _('Address:'); ?><br />
-<input type="text" name="address" value="<?php echo htmlspecialchars(stripslashes($address)); ?>" size="80" />
+<input type="text" name="address" value="<?php echo htmlspecialchars($address); ?>" size="80" />
</p>
<p>
<?php echo _('Address:'); ?><br />
-<input type="text" name="address2" value="<?php echo htmlspecialchars(stripslashes($address2)); ?>" size="80" />
+<input type="text" name="address2" value="<?php echo htmlspecialchars($address2); ?>" size="80" />
</p>
<p>
<?php echo _('Phone:'); ?><br />
-<input type="text" name="phone" value="<?php echo htmlspecialchars(stripslashes($phone)); ?>" size="20" />
+<input type="text" name="phone" value="<?php echo htmlspecialchars($phone); ?>" size="20" />
</p>
<p>
<?php echo _('FAX:'); ?><br />
-<input type="text" name="fax" value="<?php echo htmlspecialchars(stripslashes($fax)); ?>" size="20" />
+<input type="text" name="fax" value="<?php echo htmlspecialchars($fax); ?>" size="20" />
</p>
<p>
<input type="checkbox" name="mail_site" value="1" checked="checked" />