Changeset 600 for trunk

Timestamp:

01/13/09 18:30:30 (15 years ago)

Author:

niltonneto

Message:

Implementações do desenvolvedor: amuller@…

Location:

trunk/calendar_new

Files:

• inc/class.uicalendar.inc.php (modified) (4 diffs)
• js/calendar_functions.js (modified) (2 diffs)

trunk/calendar_new/inc/class.uicalendar.inc.php

@@ -93 +93 @@
 
                 // Printing results in XML
-                for($i = $this->workdaystarts; $i <= $this->workdayends; $i = $i + 0.5){
+                for($i = $this->workdaystarts; $i <= $this->workdayends; $i = $i + 0.5)
+                {
                         if($i == intval($i))
                                 $retorno.= "<workday><timeid>".($i < 10 ? "0" : "").intval($i)."00</timeid><hour>".($i < 10 ? "0" : "").intval($i).":00</hour>";
@@ -105 +106 @@
                                         $retorno .= "<calEvent>";
                                         $retorno .= "<id>".$line['cal_id']."</id>";
-                                        $retorno .= "<title>".$line['title']."</title>";
-                                        $retorno .= "<description>".$line['description']."</description>";
+                                        $retorno .= "<title>".htmlspecialchars($line['title'])."</title>";
+                                        $retorno .= "<description>".htmlspecialchars($line['description'])."</description>";
                                         $retorno .= "<edatetime>".($line['edatetime']*1000)."</edatetime>";
                                         $retorno .= "<datetime>".($line['datetime']*1000)."</datetime>";       
@@ -141 +142 @@
                                         $retorno .= "<calEvent>";
                                         $retorno .= "<id>".$line['cal_id']."</id>";
-                                        $retorno .= "<title>".$line['title']."</title>";
-                                        $retorno .= "<description>".$line['description']."</description>";
+                                        $retorno .= "<title>".htmlspecialchars($line['title'])."</title>";
+                                        $retorno .= "<description>".htmlspecialchars($line['description'])."</description>";
                                         $retorno .= "<edatetime>".($line['edatetime']*1000)."</edatetime>";
                                         $retorno .= "<datetime>".($line['datetime']*1000)."</datetime>";
@@ -192 +193 @@
                                 $retorno .= "<calEvent>";
                                 $retorno .= "<id>".$line['cal_id']."</id>";
-                                $retorno .= "<title>".$line['title']."</title>";
+                                $retorno .= "<title>".htmlspecialchars($line['title'])."</title>";
                                 $retorno .= "<edatetime>".($line['edatetime']*1000)."</edatetime>";
                                 $retorno .= "<datetime>".($line['datetime']*1000)."</datetime>";

trunk/calendar_new/js/calendar_functions.js

@@ -77 +77 @@
         var handler_getView = function(XMLdata)
         {
-
-                try {
                         _this.parseView(XMLdata,type);
 
@@ -117 +115 @@
                         document.getElementById("l_date").innerHTML += "<a href=\"javascript:calendar.getView('div_main','"+viewType+"','&time='+this.nextView);\">&nbsp;\>\></a>";
 
-                }catch(e){ alert(e+"\n"+e.description); }
                 var events = document.getElementById('returnEvents');
                 while(typeof(events.firstChild.id) == 'string'){