Project

General

Profile

« Previous | Next » 

Revision 378296af

Added by Ermal LUÇI over 11 years ago

Use descr as the field name for voucher description so it gets CDATA protection. Fixes #3441

View differences:

usr/local/www/services_captiveportal_vouchers_edit.php
76 76
	$pconfig['number'] = $a_roll[$id]['number'];
77 77
	$pconfig['count'] = $a_roll[$id]['count'];
78 78
	$pconfig['minutes'] = $a_roll[$id]['minutes'];
79
	$pconfig['comment'] = $a_roll[$id]['comment'];
79
	$pconfig['descr'] = $a_roll[$id]['descr'];
80 80
}
81 81

  
82 82
$maxnumber = (1<<$config['voucher'][$cpzone]['rollbits']) -1;    // Highest Roll#
......
118 118
        $rollent['zone']  = $_POST['zone'];
119 119
        $rollent['number']  = $_POST['number'];
120 120
        $rollent['minutes'] = $_POST['minutes'];
121
        $rollent['comment'] = $_POST['comment'];
121
        $rollent['descr'] = $_POST['descr'];
122 122

  
123 123
        /* New Roll or modified voucher count: create bitmask */
124 124
	$voucherlck = lock("voucher{$cpzone}");
......
194 194
	<tr> 
195 195
	  <td width="22%" valign="top" class="vncell"><?=gettext("Comment"); ?></td>
196 196
	  <td width="78%" class="vtable"> 
197
		<?=$mandfldhtml;?><input name="comment" type="text" class="formfld" id="comment" size="60" value="<?=htmlspecialchars($pconfig['comment']);?>"> 
197
		<?=$mandfldhtml;?><input name="descr" type="text" class="formfld" id="descr" size="60" value="<?=htmlspecialchars($pconfig['descr']);?>"> 
198 198
        <br>
199 199
        <span class="vexpl"><?=gettext("Can be used to further identify this roll. Ignored by the system"); ?>.</span>
200 200
		</td>

Also available in: Unified diff