X-Git-Url: http://wagnertech.de/gitweb/gitweb.cgi/mfinanz.git/blobdiff_plain/ab1df08bfae3ef3361c7b5e4e16d91ae3cb34961..e20f3f0dac8c4b362af0e6594de9581d05d0f6c4:/templates/webpages/ct/get_delivery_de.html

diff --git a/templates/webpages/ct/get_delivery_de.html b/templates/webpages/ct/get_delivery_de.html
index 9f723f7f4..b6daa6717 100644
--- a/templates/webpages/ct/get_delivery_de.html
+++ b/templates/webpages/ct/get_delivery_de.html
@@ -1,29 +1,28 @@
-[% USE LxERP %]
-<table width=100%>
+[% USE HTML %][% USE LxERP %]
+<table width="100%">
   <tr>
     <td>
-      <table width=100%>
-        <tr class=listheading>
-          <th class=listheading>Lieferadresse</th>
-          <th class=listheading>Rechnung</th>
-          <th class=listheading>Auftrag</th>
-          <th class=listheading>Rechnungsdatum</th>
-          <th class=listheading>Beschreibung</th>
-          <th class=listheading>Menge</th>
-          <th class=listheading>Einheit</th>
-          <th class=listheading>Verkaufspreis</th>
+      <table width="100%">
+        <tr class="listheading">
+          <th class="listheading">Lieferadresse</th>
+          <th class="listheading">Rechnung</th>
+          <th class="listheading">Auftrag</th>
+          <th class="listheading">Rechnungsdatum</th>
+          <th class="listheading">Beschreibung</th>
+          <th class="listheading">Menge</th>
+          <th class="listheading">Einheit</th>
+          <th class="listheading">Verkaufspreis</th>
         </tr>
 [%- FOREACH row = DELIVERY %]
-        <tr class=listrow[% loop.count % 2 %]>
-          
-          <td>[% row.shiptoname UNLESS loop.prev.shiptoname == row.shiptoname %]&nbsp;</td>
-          <td>[% row.invnumber   %]&nbsp;</td>
-          <td>[% row.ordnumber   %]&nbsp;</td>
-          <td>[% row.transdate   %]&nbsp;</td>
-          <td>[% row.description %]&nbsp;</td>
-          <td>[% row.qty         %]&nbsp;</td>
-          <td>[% row.unit        %]&nbsp;</td>
-          <td>[% LxERP.format_amount(row.sellprice, 2) %]&nbsp;</td>
+        <tr class="listrow[% loop.count % 2 %]">
+          <td>[% HTML.escape(row.shiptoname) UNLESS loop.prev.shiptoname == row.shiptoname %]&nbsp;</td>
+          <td>[% IF row.id %]<a href='is.pl?action=edit&id=[% HTML.escape(row.id) %]'>[% END %][% HTML.escape(row.invnumber)   || '&nbsp;' %][% IF row.id %]</a>[% END %]</td>
+          <td>[% IF row.oe_id %]<a href='oe.pl?action=edit&type=sales_order&vc=customer&id=[% HTML.escape(row.oe_id) %]'>[% END %][% HTML.escape(row.ordnumber)   || '&nbsp;' %][% IF row.oe_id %]</a>[% END %]</td>
+          <td>[% HTML.escape(row.transdate)   || '&nbsp;' %]</td>
+          <td>[% HTML.escape(row.description) || '&nbsp;' %]</td>
+          <td>[% HTML.escape(row.qty)         || '&nbsp;' %]</td>
+          <td>[% HTML.escape(row.unit)        || '&nbsp;' %]</td>
+          <td>[% LxERP.format_amount(row.sellprice, 2) || '&nbsp;' %]</td>
         </tr>
 [%- END %]