X-Git-Url: http://wagnertech.de/gitweb/gitweb.cgi/mfinanz.git/blobdiff_plain/ab1df08bfae3ef3361c7b5e4e16d91ae3cb34961..e20f3f0dac8c4b362af0e6594de9581d05d0f6c4:/templates/webpages/ct/get_delivery_master.html

diff --git a/templates/webpages/ct/get_delivery_master.html b/templates/webpages/ct/get_delivery_master.html
index 772b83ba4..a8d53a780 100644
--- a/templates/webpages/ct/get_delivery_master.html
+++ b/templates/webpages/ct/get_delivery_master.html
@@ -1,29 +1,28 @@
-[% USE LxERP %]
-<table width=100%>
+[% USE HTML %][% USE LxERP %]
+<table width="100%">
   <tr>
     <td>
-      <table width=100%>
-        <tr class=listheading>
-          <th class=listheading><translate>Shipping Address</translate></th>
-          <th class=listheading><translate>Invoice</translate></th>
-          <th class=listheading><translate>Order</translate></th>
-          <th class=listheading><translate>Invdate</translate></th>
-          <th class=listheading><translate>Description</translate></th>
-          <th class=listheading><translate>Qty</translate></th>
-          <th class=listheading><translate>Unit</translate></th>
-          <th class=listheading><translate>Sell Price</translate></th>
+      <table width="100%">
+        <tr class="listheading">
+          <th class="listheading"><translate>Shipping Address</translate></th>
+          <th class="listheading"><translate>Invoice</translate></th>
+          <th class="listheading"><translate>Order</translate></th>
+          <th class="listheading"><translate>Invdate</translate></th>
+          <th class="listheading"><translate>Description</translate></th>
+          <th class="listheading"><translate>Qty</translate></th>
+          <th class="listheading"><translate>Unit</translate></th>
+          <th class="listheading"><translate>Sell Price</translate></th>
         </tr>
 [%- FOREACH row = DELIVERY %]
-        <tr class=listrow[% loop.count % 2 %]>
-          
-          <td>[% row.shiptoname UNLESS loop.prev.shiptoname == row.shiptoname %]&nbsp;</td>
-          <td>[% row.invnumber   %]&nbsp;</td>
-          <td>[% row.ordnumber   %]&nbsp;</td>
-          <td>[% row.transdate   %]&nbsp;</td>
-          <td>[% row.description %]&nbsp;</td>
-          <td>[% row.qty         %]&nbsp;</td>
-          <td>[% row.unit        %]&nbsp;</td>
-          <td>[% LxERP.format_amount(row.sellprice, 2) %]&nbsp;</td>
+        <tr class="listrow[% loop.count % 2 %]">
+          <td>[% HTML.escape(row.shiptoname) UNLESS loop.prev.shiptoname == row.shiptoname %]&nbsp;</td>
+          <td>[% IF row.id %]<a href='is.pl?action=edit&id=[% HTML.escape(row.id) %]'>[% END %][% HTML.escape(row.invnumber)   || '&nbsp;' %][% IF row.id %]</a>[% END %]</td>
+          <td>[% IF row.oe_id %]<a href='oe.pl?action=edit&type=sales_order&vc=customer&id=[% HTML.escape(row.oe_id) %]'>[% END %][% HTML.escape(row.ordnumber)   || '&nbsp;' %][% IF row.oe_id %]</a>[% END %]</td>
+          <td>[% HTML.escape(row.transdate)   || '&nbsp;' %]</td>
+          <td>[% HTML.escape(row.description) || '&nbsp;' %]</td>
+          <td>[% HTML.escape(row.qty)         || '&nbsp;' %]</td>
+          <td>[% HTML.escape(row.unit)        || '&nbsp;' %]</td>
+          <td>[% LxERP.format_amount(row.sellprice, 2) || '&nbsp;' %]</td>
         </tr>
 [%- END %]