diff --git a/Theme/Backend/department-list.tpl.php b/Theme/Backend/department-list.tpl.php index 06ec1f8..50116df 100644 --- a/Theme/Backend/department-list.tpl.php +++ b/Theme/Backend/department-list.tpl.php @@ -29,27 +29,27 @@ echo $this->getData('nav')->render(); ?>
| = $this->getText('ID', 0, 0); ?> - | = $this->getText('Name'); ?> - | = $this->getText('Employees'); ?> - | = $this->getText('Parent'); ?> + | = $this->getHtml('ID', 0, 0); ?> + | = $this->getHtml('Name') ?> + | = $this->getHtml('Employees') ?> + | = $this->getHtml('Parent') ?> |
| = $footerView->render(); ?> + | |||||||
| = htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?> | |||||||
| = $value->getId(); ?> - | = $value->getName(); ?> + | = htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?> + | = htmlspecialchars($value->getName(), ENT_COMPAT, 'utf-8'); ?> | - | |||
| = $this->getText('Empty', 0, 0); ?> + | |||||||
| = $this->getHtml('Empty', 0, 0); ?> | |||||||
| = $this->getText('ID', 0, 0); ?> - | = $this->getText('Name'); ?> - | = $this->getText('Position'); ?> - | = $this->getText('Department'); ?> - | = $this->getText('Status'); ?> + | = $this->getHtml('ID', 0, 0); ?> + | = $this->getHtml('Name') ?> + | = $this->getHtml('Position') ?> + | = $this->getHtml('Department') ?> + | = $this->getHtml('Status') ?> |
| = $footerView->render(); ?> + | |||||||||
| = htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?> | |||||||||
| = $value->getId(); ?> - | = $value->getAccount()->getName1(); ?> - | = '' ?> - | = '' ?> - | = '' ?> + | = htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?> + | = htmlspecialchars($value->getAccount()->getName1(), ENT_COMPAT, 'utf-8'); ?> + | = htmlspecialchars('' , ENT_COMPAT, 'utf-8'); ?> + | = htmlspecialchars('' , ENT_COMPAT, 'utf-8'); ?> + | = htmlspecialchars('' , ENT_COMPAT, 'utf-8'); ?> - |
| = $this->getText('Empty', 0, 0); ?> + | |||||||||
| = $this->getHtml('Empty', 0, 0); ?> | |||||||||
| = $this->getText('Name'); ?> - | = $account->getName3(); ?>, = $account->getName1(); ?> + | = $this->getHtml('Name') ?> + | = htmlspecialchars($account->getName3(), ENT_COMPAT, 'utf-8'); ?>, = htmlspecialchars($account->getName1(), ENT_COMPAT, 'utf-8'); ?> |
|---|---|---|---|
| = $this->getText('Position'); ?> + | = $this->getHtml('Position') ?> | Sailor | |
| = $this->getText('Department'); ?> + | = $this->getHtml('Department') ?> | Sailor | |
| = $this->getText('Birthday'); ?> + | = $this->getHtml('Birthday') ?> | 06.09.1934 | |
| = $this->getText('Email'); ?> - | = $account->getEmail(); ?> + | = $this->getHtml('Email') ?> + | = htmlspecialchars($account->getEmail(), ENT_COMPAT, 'utf-8'); ?> |
| Address | @@ -44,7 +44,7 @@ echo $this->getData('nav')->render(); ?> | Work | SMALLSYS INC 795 E DRAGRAM TUCSON AZ 85705 USA |
| = $this->getText('Phone'); ?> + | = $this->getHtml('Phone') ?> | ||
| Private @@ -56,33 +56,33 @@ echo $this->getData('nav')->render(); ?> | Work | +01 12345-4567 | |
| = $this->getText('Status'); ?> - | = $account->getStatus(); ?> + | = $this->getHtml('Status') ?> + | = htmlspecialchars($account->getStatus(), ENT_COMPAT, 'utf-8'); ?> |
| = $this->getText('Start'); ?> - | = $account->getName3(); ?> + | = $this->getHtml('Start') ?> + | = htmlspecialchars($account->getName3(), ENT_COMPAT, 'utf-8'); ?> |
|---|---|---|---|
| = $this->getText('End'); ?> - | = $account->getName3(); ?> + | = $this->getHtml('End') ?> + | = htmlspecialchars($account->getName3(), ENT_COMPAT, 'utf-8'); ?> |
| = $this->getText('Hours'); ?> - | = $account->getName3(); ?> + | = $this->getHtml('Hours') ?> + | = htmlspecialchars($account->getName3(), ENT_COMPAT, 'utf-8'); ?> |
| = $this->getText('Vacation'); ?> - | = $account->getName3(); ?> + | = $this->getHtml('Vacation') ?> + | = htmlspecialchars($account->getName3(), ENT_COMPAT, 'utf-8'); ?> |
| = $this->getText('Salary'); ?> - | = $account->getName3(); ?> + | = $this->getHtml('Salary') ?> + | = htmlspecialchars($account->getName3(), ENT_COMPAT, 'utf-8'); ?> |
| = $this->getText('Start'); ?> - | = $this->getText('End'); ?> - | = $this->getText('Position'); ?> - | = $this->getText('Department'); ?> - | = $this->getText('Salary'); ?> + | = $this->getHtml('Start') ?> + | = $this->getHtml('End') ?> + | = $this->getHtml('Position') ?> + | = $this->getHtml('Department') ?> + | = $this->getHtml('Salary') ?> |
| = $footerView->render(); ?> + | |||||||||
| = htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?> | |||||||||
| = $value->getId(); ?> - | = $value->getNewestHistory()->getPosition(); ?> - | = $value->getNewestHistory()->getPosition(); ?> + | = htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?> + | = htmlspecialchars($value->getNewestHistory()->getPosition(), ENT_COMPAT, 'utf-8'); ?> + | = htmlspecialchars($value->getNewestHistory()->getPosition(), ENT_COMPAT, 'utf-8'); ?> - | ||||
| = $this->getText('Empty', 0, 0); ?> + | |||||||||
| = $this->getHtml('Empty', 0, 0); ?> | |||||||||
| = $this->getText('Start'); ?> - | = $this->getText('End'); ?> - | = $this->getText('Type'); ?> + | = $this->getHtml('Start') ?> + | = $this->getHtml('End') ?> + | = $this->getHtml('Type') ?> |
| = $footerView->render(); ?> + | |||||
| = htmlspecialchars($footerView->render(), ENT_COMPAT, 'utf-8'); ?> | |||||
| = $value->getId(); ?> - | = $value->getNewestHistory()->getPosition(); ?> - | = $value->getNewestHistory()->getPosition(); ?> + | = htmlspecialchars($value->getId(), ENT_COMPAT, 'utf-8'); ?> + | = htmlspecialchars($value->getNewestHistory()->getPosition(), ENT_COMPAT, 'utf-8'); ?> + | = htmlspecialchars($value->getNewestHistory()->getPosition(), ENT_COMPAT, 'utf-8'); ?> - |
| = $this->getText('Empty', 0, 0); ?> + | |||||
| = $this->getHtml('Empty', 0, 0); ?> | |||||
| = $this->getText('Date'); ?> - | = $account->getName3(); ?> + | = $this->getHtml('Date') ?> + | = htmlspecialchars($account->getName3(), ENT_COMPAT, 'utf-8'); ?> |
|---|---|---|---|
| = $this->getText('SalaryType'); ?> - | = $account->getName3(); ?> + | = $this->getHtml('SalaryType') ?> + | = htmlspecialchars($account->getName3(), ENT_COMPAT, 'utf-8'); ?> |
| = $this->getText('Amount'); ?> - | = $account->getName3(); ?> + | = $this->getHtml('Amount') ?> + | = htmlspecialchars($account->getName3(), ENT_COMPAT, 'utf-8'); ?> |