[Phpgroupware-cvs] CVS: addressbook/inc class.uiaddressbook.inc.php,1.54,1.55

[Ralf Becker <address@hidden>]

Update of /cvsroot/phpgroupware/addressbook/inc
In directory subversions:/tmp/cvs-serv27082

Modified Files:
        class.uiaddressbook.inc.php 
Log Message:
xss fix, running the content of the address-label-function through strip_html


Index: class.uiaddressbook.inc.php
===================================================================
RCS file: /cvsroot/phpgroupware/addressbook/inc/class.uiaddressbook.inc.php,v
retrieving revision 1.54
retrieving revision 1.55
diff -C2 -r1.54 -r1.55
*** class.uiaddressbook.inc.php 27 Apr 2003 22:37:37 -0000      1.54
--- class.uiaddressbook.inc.php 2 Jul 2003 00:18:11 -0000       1.55
***************
*** 1000,1008 ****
                                                }
                                        }
!                                       elseif($column == 'label' && $coldata)
!                                       {
!                                               $data .= 
$this->contacts->formatted_address($fields[0]['id'],'',False);
!                                       }
!                                       elseif($column == 'url' && $coldata)
                                        {
                                                $ref = '<a href="' . $coldata . 
'" target="_new">';
--- 1000,1004 ----
                                                }
                                        }
!                                       elseif ($column == 'url' && $coldata)
                                        {
                                                $ref = '<a href="' . $coldata . 
'" target="_new">';
***************
*** 1020,1023 ****
--- 1016,1024 ----
                                                }
                                                $data = $coldata.'</a>';
+                                       }
+                                       elseif ($column == 'bday')
+                                       {
+                                               list($month,$day,$year) = 
explode('/',$coldata);
+                                               $data = 
$GLOBALS['phpgw']->common->dateformatorder($year,$month,$day,True);
                                        }
                                        else