X-Git-Url: http://wagnertech.de/git?a=blobdiff_plain;f=templates%2Fwebpages%2Fct%2Fform_footer_de.html;h=b8b9aaeaf1ef6d0dfec9eaa263c55dbca2ae89c2;hb=87993e9bbff0f83e3c8d30e376d434fdc60383a2;hp=3f1495a57151dab95e1cf2ae494344c21e29ce1c;hpb=35182445480f8cfc9f1ed63466be6131466f7c73;p=kivitendo-erp.git

diff --git a/templates/webpages/ct/form_footer_de.html b/templates/webpages/ct/form_footer_de.html
index 3f1495a57..b8b9aaeaf 100644
--- a/templates/webpages/ct/form_footer_de.html
+++ b/templates/webpages/ct/form_footer_de.html
@@ -1,32 +1,41 @@
+[% USE HTML %]
 
-<input name=id type=hidden id=cvid value=[% id %]>
-<input name=business_save type=hidden value="[% selectbusiness %]">
-<input name=title_save type=hidden value="[% title %]">
+<input name="id" type="hidden" id="cvid" value="[% HTML.escape(id) %]">
+<input name="business_save" type="hidden" value="[% HTML.escape(selectbusiness) %]">
+<input name="title_save" type="hidden" value="[% HTML.escape(title) %]">
 
-<input type=hidden name=login value=[% login %]>
-<input type=hidden name=password value=[% password %]>
-
-<input type=hidden name=callback value="[% callback %]">
-<input type=hidden name=db id=db value=[% db %]>
+<input type="hidden" name="callback" value="[% HTML.escape(callback) %]">
+<input type="hidden" name="db" id="db" value="[% HTML.escape(db) %]">
 
 <br>
-  <input class=submit type=submit name=action accesskey="s" value="Speichern">
-  <input class=submit type=submit name=action accesskey="s" value="Speichern und schließen">
-  <input class=submit type=submit name=action value=" [% IF is_cumstomer %]Speichern und Debitorenbuchung erfassen[% ELSE %]Speichern und Kreditorenbuchung erfassen[% END %]">
-  <input class=submit type=submit name=action value="Speichern und Rechnung erfassen">
-  <input class=submit type=submit name=action value="Speichern und Auftrag erfassen">
-  <input class=submit type=submit name=action value="[% IF is_customer %]Speichern und Angebot[% ELSE %]Speichern und Lieferantenanfrage[% END %]">
+  <input class="submit" type="submit" name="action" accesskey="s" value="Speichern">
+  <input class="submit" type="submit" name="action" accesskey="s" value="Speichern und schließen">
+  [%- IF is_cumstomer %]
+  <input class="submit" type="submit" name="action" value="Speichern und Debitorenbuchung erfassen">
+  [%- ELSE %]
+  <input class="submit" type="submit" name="action" value="Speichern und Kreditorenbuchung erfassen">
+  [%- END %]
+  <input class="submit" type="submit" name="action" value="Speichern und Rechnung erfassen">
+  <input class="submit" type="submit" name="action" value="Speichern und Auftrag erfassen">
+  [%- IF is_customer %]
+  <input class="submit" type="submit" name="action" value="Speichern und Angebot">
+  [%- ELSE %]
+  <input class="submit" type="submit" name="action" value="Speichern und Lieferantenanfrage">
+  [%- END %]
 [%- IF id AND is_orphaned %]
-  <input class=submit type=submit name=action value="Löschen">
+  <input class="submit" type="submit" name="action" value="Löschen">
 [%- END %]
 [%- IF id %]
-  <input type=button class=submit onclick=set_history_window([% id %]); name=history id=history value=Historie>|;
+  <input type="button" class="submit" onclick="set_history_window([% HTML.escape(id) %]);" name="history" id="history" value="Historie">
 [%- END %]
 
   </form>
-<script type="text/javascript">
-//Start Tab Content script for UL with id="maintab" Separate multiple ids each with a comma.
-initializetabcontent("maintab")
-</script>
+
+ <script type="text/javascript">
+  <!--
+      //Start Tab Content script for UL with id="maintab".
+      initializetabcontent("maintab");
+    -->
+ </script>
 </body>
 </html>