From: hickert <hickert@594d385d-05f5-0310-b6e9-bd551577e9d8>
Date: Fri, 19 Jun 2009 09:09:49 +0000 (+0000)
Subject: Fixed quote problem for ' " in dns record list.
X-Git-Url: https://git.tokkee.org/?a=commitdiff_plain;h=9adb8227b47948bbf233093f55b432cf1021f81d;p=gosa.git

Fixed quote problem for ' " in dns record list.


git-svn-id: https://oss.gonicus.de/repositories/gosa/trunk@13739 594d385d-05f5-0310-b6e9-bd551577e9d8
---

diff --git a/gosa-plugins/systems/admin/systems/class_termDNS.inc b/gosa-plugins/systems/admin/systems/class_termDNS.inc
index c31dbeba9..ef6f8252a 100644
--- a/gosa-plugins/systems/admin/systems/class_termDNS.inc
+++ b/gosa-plugins/systems/admin/systems/class_termDNS.inc
@@ -425,7 +425,7 @@ class termDNS extends plugin
 
       /* Assign smarty all DNS attributes */
       foreach($this->DNSattributes as $attr){
-        $smarty->assign($attr,$this->dnsEntry[$attr]);
+        $smarty->assign($attr,htmlentities($this->dnsEntry[$attr]));
       }
 
       /* Assign all needed vars */
@@ -569,7 +569,7 @@ class termDNS extends plugin
         /* Get all basic DNS attributes (TTL, Clas ..)*/
         foreach($this->DNSattributes as $attr){
           if(isset($_POST[$attr])){
-            $this->dnsEntry[$attr] = $_POST[$attr];
+            $this->dnsEntry[$attr] = get_post($attr);
           }
         }
       }
@@ -940,7 +940,7 @@ class termDNS extends plugin
 
         $str.=" <tr>".
           "   <td>".$this->generateRecordListBox($entry['type'],"RecordTypeSelectedFor_".$key)."</td>".
-          "   <td><input type='text' value='".$entry['value']."' name='RecordValue_".$key."' id='RecordValue_".$key."'></td>".
+          "   <td><input type='text' value=\"".htmlentities($entry['value'])."\" name='RecordValue_".$key."' id='RecordValue_".$key."'></td>".
           "   <td><input type='submit' name='RemoveRecord_".$key."' value='"._("Delete")."' id='RemoveRecord_".$key."'></td>".
           "</tr>";
     }
@@ -952,6 +952,7 @@ class termDNS extends plugin
            "  </tr>".
            "</table>";
      $ret =  array("str" => $str, "changeStateForRecords" => $changeStateForRecords);
+  
     return($ret);
   }