diff --git a/application/views/request/course_id.xhtml b/application/views/request/course_id.xhtml index 6694849dddf08c02ab55cfd37730edcd4ef16fcf..5797024b6c0a108e3e9ab56325a62ae9f0ae69ec 100644 --- a/application/views/request/course_id.xhtml +++ b/application/views/request/course_id.xhtml @@ -1,25 +1,25 @@ <fieldset class="two_column"> <label> <h2>Subject</h2> - <input type="text" name="subject" value="<?php echo htmlentities($this->course->subject); ?>" /> + <input type="text" name="subject" value="<?php echo htmlspecialchars($this->course->subject); ?>" /> </label> <label> <h2>Course Number</h2> - <input type="text" name="courseNumber" value="<?php echo htmlentities($this->course->courseNumber); ?>" /> + <input type="text" name="courseNumber" value="<?php echo htmlspecialchars($this->course->courseNumber); ?>" /> </label> <label> <h2>Alpha Suffix (opt.)</h2> - <input type="text" name="courseLetter" value="<?php echo htmlentities($this->course->courseLetter); ?>" /> + <input type="text" name="courseLetter" value="<?php echo htmlspecialchars($this->course->courseLetter); ?>" /> </label> <label> <h2>Title</h2> - <input type="text" name="title" value="<?php echo htmlentities($this->course->title); ?>" /> + <input type="text" name="title" value="<?php echo htmlspecialchars($this->course->title); ?>" /> </label> </fieldset> <fieldset> <label> <h2>Prerequisites (text)</h2> - <textarea name="prerequisite" class="mceEditor"><?php echo $this->course->prerequisite; ?></textarea> + <textarea name="prerequisite" class="mceEditor"><?php echo htmlspecialchars($this->course->prerequisite); ?></textarea> </label> </fieldset> \ No newline at end of file diff --git a/application/views/request/graduate_tie_in.xhtml b/application/views/request/graduate_tie_in.xhtml index 053ac5bc9885e8ebb20f32edbbf9236086efb08f..9eed96d97c1e7777821c98c3223e195cbb28fd96 100644 --- a/application/views/request/graduate_tie_in.xhtml +++ b/application/views/request/graduate_tie_in.xhtml @@ -1,11 +1,11 @@ <fieldset> <label> <h2>Notes (will appear in italics)</h2> - <textarea name="notes" class="mceEditor"><?php echo $this->course->notes; ?></textarea> + <textarea name="notes" class="mceEditor"><?php echo htmlspecialchars($this->course->notes); ?></textarea> </label> <label> <h2>Description</h2> - <textarea name="description" class="mceEditor"><?php echo $this->course->description; ?></textarea> + <textarea name="description" class="mceEditor"><?php echo htmlspecialchars($this->course->description); ?></textarea> </label> </fieldset> @@ -14,18 +14,18 @@ <h2>Graduate Tie-in</h2> <label> <h3>Credits</h3> - <input type="text" name="gradTieIn[credits]" value ="<?php echo $this->course->gradTieIn->credits; ?>" /> + <input type="text" name="gradTieIn[credits]" value ="<?php echo htmlspecialchars($this->course->gradTieIn->credits); ?>" /> </label> <label> <h3>Notes</h3> - <textarea name="gradTieIn[notes]" class="mceEditor"><?php echo $this->course->gradTieIn->notes; ?></textarea> + <textarea name="gradTieIn[notes]" class="mceEditor"><?php echo htmlspecialchars($this->course->gradTieIn->notes); ?></textarea> </label> </fieldset> <fieldset> <label> <h2>Prerequisites (text)</h2> - <textarea name="gradTieIn[prerequisites]" class="mceEditor"><?php echo $this->course->gradTieIn->prerequisites; ?></textarea> + <textarea name="gradTieIn[prerequisites]" class="mceEditor"><?php echo htmlspecialchars($this->course->gradTieIn->prerequisites); ?></textarea> </label> </fieldset> diff --git a/application/views/request/supportive_material.xhtml b/application/views/request/supportive_material.xhtml index dd86c5d58cd7fdf1ea2041ab13b2877bff68d055..4b3849537f75e56c0e3d7c5461f4e5da2531953b 100644 --- a/application/views/request/supportive_material.xhtml +++ b/application/views/request/supportive_material.xhtml @@ -1,14 +1,14 @@ <fieldset> <label> <h2>Justification</h2> - <textarea name="request[justification]" class="mceEditor"><?php echo $this->request->justification; ?></textarea> + <textarea name="request[justification]" class="mceEditor"><?php echo htmlspecialchars($this->request->justification); ?></textarea> </label> </fieldset> <fieldset> <label> <h2>Syllabus</h2> - <?php echo $this->request->getFileByType(RequestFile::SYLLABUS_TYPE)->title; ?> + <?php echo htmlspecialchars($this->request->getFileByType(RequestFile::SYLLABUS_TYPE)->title); ?> <input type="file" name="request[<?php echo RequestFile::SYLLABUS_TYPE; ?>]" /> </label> <label> @@ -21,7 +21,7 @@ <fieldset> <label> <h2>Crosslist Memo</h2> - <?php echo $this->request->getFileByType(RequestFile::CROSSLIST_MEMO_TYPE)->title; ?> + <?php echo htmlspecialchars($this->request->getFileByType(RequestFile::CROSSLIST_MEMO_TYPE)->title); ?> <input type="file" name="request[<?php echo RequestFile::CROSSLIST_MEMO_TYPE; ?>]" /> </label> <label> @@ -35,7 +35,7 @@ <fieldset> <label> <h2>IS Narrative Documentation</h2> - <?php echo $this->request->getFileByType(RequestFile::IS_NARRATIVE_TYPE)->title; ?> + <?php echo htmlspecialchars($this->request->getFileByType(RequestFile::IS_NARRATIVE_TYPE)->title); ?> <input type="file" name="request[<?php echo RequestFile::IS_NARRATIVE_TYPE; ?>]" /> </label> <label>