X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=templates%2Fwebpages%2Fcommon%2Fsearch_history_master.html;h=6aa176fbb3fe709b8e7dc33b51f5894c4d8eb293;hb=274ef023214260e0124a230340452aff39dc126c;hp=d067a0473972bcc5949b772cd2af5baf895551a9;hpb=41a039692bf1d655df629fd833fd6d6d428eb29b;p=kivitendo-erp.git

diff --git a/templates/webpages/common/search_history_master.html b/templates/webpages/common/search_history_master.html
index d067a0473..6aa176fbb 100644
--- a/templates/webpages/common/search_history_master.html
+++ b/templates/webpages/common/search_history_master.html
@@ -1,4 +1,4 @@
-<style type="text/css">@import url(js/jscalendar/calendar-win2k-1.css);</style>
+[% USE HTML %]<style type="text/css">@import url(js/jscalendar/calendar-win2k-1.css);</style>
 <script type="text/javascript" src="js/jscalendar/calendar.js"></script>
 <script type="text/javascript" src="js/jscalendar/lang/calendar-de.js"></script>
 <script type="text/javascript" src="js/jscalendar/calendar-setup.js"></script>
@@ -6,8 +6,6 @@
 
 <form method="post" onSubmit="javascript:set_history_uri();">
 
-<input type="hidden" name="login" value="<TMPL_VAR NAME=login ESCAPE=HTML>">
-<input type="hidden" name="password" value="<TMPL_VAR NAME=password ESCAPE=HTML>">
 <input type="hidden" name="action" value="show_am_history">
 
 	<table>
@@ -21,10 +19,10 @@
 					<!--
                     function uncheckOther(id) {
 						if(!(
-						    (document.getElementById('non-deleted').checked == false) 
-					    	&& 
-						    (document.getElementById('both').checked == false) 
-						    && 
+						    (document.getElementById('non-deleted').checked == false)
+					    	&&
+						    (document.getElementById('both').checked == false)
+						    &&
 						    (document.getElementById('deleted').checked == false)
 						  )) {
 								if(id == "deleted") {
@@ -41,7 +39,7 @@
 								}
 						}
 					}
-					
+
 					var defaults = new Array('SAVED', 'DELETED', 'ADDED', 'PAYMENT POSTED', 'POSTED', 'POSTED AS NEW', 'SAVED FOR DUNNING', 'DUNNING STARTED', 'PRINTED');
 					var translated = new Object();
 					translated['SAVED'] = '<translate>SAVED</translate>';
@@ -53,20 +51,20 @@
 					translated['SAVED FOR DUNNING'] = '<translate>SAVED FOR DUNNING</translate>';
 					translated['DUNNING STARTED'] = '<translate>DUNNING STARTED</translate>';
 					translated['PRINTED'] = '<translate>PRINTED</translate>';
-					
+
 					var jscalender = "<table valign=\"top\">"
 									+ "<tr><td colspan=\"2\"><b><translate>Period</translate>:&nbsp;</b></td></tr>"
 									+ "<tr><td><translate>from (time)</translate>:&nbsp;"
-									+ "<input name=\"transdate\" id=\"transdate\" size=\"11\" title=\"<TMPL_VAR NAME=myconfig_dateformat ESCAPE=HTML>\" value=\"<TMPL_VAR NAME=transdate ESCAPE=HTML>\" onChange=\"document.getElementById(\'transdate_hidden\').value=this.value;\">"
+									+ "<input name=\"transdate\" id=\"transdate\" size=\"11\" title=\"[% HTML.escape(myconfig_dateformat) %]\" value=\"[% HTML.escape(transdate) %]\" onChange=\"document.getElementById(\'transdate_hidden\').value=this.value;\">"
 									+ "<input type=\"button\" name=\"transdate\" id=\"trigger1\" value=\"?\">"
 									+ "&nbsp;</td><td><translate>to (time)</translate>:&nbsp;"
-									+ "<input name=\"reqdate\" id=\"reqdate\" size=\"11\" title=\"<TMPL_VAR NAME=myconfig_dateformat ESCAPE=HTML>\" value=\"<TMPL_VAR NAME=reqdate ESCAPE=HTML>\" onChange=\"document.getElementById(\'reqdate_hidden\').value=this.value;\">"
+									+ "<input name=\"reqdate\" id=\"reqdate\" size=\"11\" title=\"[% HTML.escape(myconfig_dateformat) %]\" value=\"[% HTML.escape(reqdate) %]\" onChange=\"document.getElementById(\'reqdate_hidden\').value=this.value;\">"
 									+ "<input type=\"button\" name=\"reqdate\" id=\"trigger2\" value=\"?\"></td></tr></table>";
 					var mitarbeiter = "<table valign=\"top\">"
 									+ "<tr><td><b>Mitarbeiter:</b>&nbsp;</td>"
 									+ "<td><input type='text' name='mitarbeiter' id='mitarbeiter' onChange=\"document.getElementById(\'mitarbeiter_hidden\').value=this.value;\"></td>"
 									+ "</tr></table>";
-					
+
 					var tempString = "";
 					function addForm(last, remove) {
 						if(last == "INIT") {
@@ -78,7 +76,7 @@
 							document.getElementById('selectEmployee').innerHTML = mitarbeiter;
 							document.getElementById('selectDate').innerHTML = jscalender;
 							document.getElementById('selectTable').innerHTML = tempString;
-							
+
 							Calendar.setup(
       			    		{
 		                      inputField : "transdate",
@@ -94,7 +92,7 @@
 		                  	  align : "BL",
         		          	  button : "trigger2"
           					});
-						}			
+						}
 						else {
 							defaults.splice(remove,1);
 							document.getElementById('inputText').innerHTML += ((document.getElementById('inputText').innerHTML == "") ? ("<b><translate>You've already chosen the following limitations:</translate></b><br>") : ("<br>")) + translated[last];
@@ -112,7 +110,7 @@
 							}
 						}
 					}
-					
+
 					function resetAll() {
 						document.getElementById('selectTable').innerHTML = "<a href=\"javascript:addForm('INIT')\"><translate>Yes</translate>";
 						document.getElementById('inputText').innerHTML = "";
@@ -142,7 +140,7 @@
 						 <translate>What's the <b>term</b> you're looking for?</translate>
 						</td>
 						<td>
-							<input type="text" name="searchid" id="searchid" value="<TMPL_VAR NAME=searchid ESCAPE=HTML>">
+							<input type="text" name="searchid" id="searchid" value="[% HTML.escape(searchid) %]">
 						</td>
 					</tr>
 					<tr>
@@ -185,6 +183,6 @@
 					</tr>
 				</table>
 			</td>
-		</tr>	
+		</tr>
 	</table>
 </form>