From 2be3c42c9ad348b7d5c8ca6be56e16cf1237d8df Mon Sep 17 00:00:00 2001
From: Steve Sutton <steve@gaslightmedia.com>
Date: Thu, 18 Oct 2018 16:16:55 -0400
Subject: [PATCH] Update the admin edit forms for events for escaping quotes.

Update input value attributes so they can escape the double quotes.
---
 index.php                            | 6 +++---
 views/admin/events/editFiles.html    | 6 +++---
 views/admin/events/editLocation.html | 4 ++--
 views/admin/events/editSchedule.html | 2 +-
 views/admin/events/editStatus.html   | 6 +++---
 5 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/index.php b/index.php
index f069dd5..21a34f2 100644
--- a/index.php
+++ b/index.php
@@ -3,7 +3,7 @@
  * Plugin Name: GLM Associate - Events Add-On
  * Plugin URI: http://www.gaslightmedia.com/
  * Description: Gaslight Media Members Database.
- * Version: 1.7.0
+ * Version: 1.7.1
  * Author: Chuck Scott
  * Author URI: http://www.gaslightmedia.com/
  * License: GPL2
@@ -19,7 +19,7 @@
  * @package glmMembersDatabaseEventsAddOn
  * @author Chuck Scott <cscott@gaslightmedia.com>
  * @license http://www.gaslightmedia.com Gaslightmedia
- * @version 1.7.0
+ * @version 1.7.1
  */
 
 // Check that we're being called by WordPress.
@@ -43,7 +43,7 @@ if (!defined('ABSPATH')) {
  *  so that we're sure the other add-ons see an up to date
  *  version from this plugin.
  */
-define('GLM_MEMBERS_EVENTS_PLUGIN_VERSION', '1.7.0');
+define('GLM_MEMBERS_EVENTS_PLUGIN_VERSION', '1.7.1');
 define('GLM_MEMBERS_EVENTS_PLUGIN_DB_VERSION', '0.1.7');
 
 // This is the minimum version of the GLM Members DB plugin require for this plugin.
diff --git a/views/admin/events/editFiles.html b/views/admin/events/editFiles.html
index 536c407..be635ed 100644
--- a/views/admin/events/editFiles.html
+++ b/views/admin/events/editFiles.html
@@ -17,7 +17,7 @@
         <tr>
             <th {if $event.fieldRequired.file1_descr}class="glm-required"{/if}>&nbsp;&nbsp;&nbsp;Description:</th>
             <td {if $event.fieldFail.file1_descr}class="glm-form-bad-input" data-tabid="glm-event-files"{/if}>
-                <input type="text" name="file1_descr" class="glm-form-text-input glm-char-count" value="{$event.fieldData.file1_descr}" data-msgArea="file_descr_msg1" maxlength="165">
+                <input type="text" name="file1_descr" class="glm-form-text-input glm-char-count" value="{$event.fieldData.file1_descr|escape}" data-msgArea="file_descr_msg1" maxlength="165">
                 <br><span id="file_descr_msg1"></span>
                 {if $event.fieldFail.file1_descr}<p>{$event.fieldFail.file1_descr}</p>{/if}
             </td>
@@ -38,7 +38,7 @@
         <tr>
             <th {if $event.fieldRequired.file2_descr}class="glm-required"{/if}>&nbsp;&nbsp;&nbsp;Description:</th>
             <td {if $event.fieldFail.file2_descr}class="glm-form-bad-input" data-tabid="glm-event-files"{/if}>
-                <input type="text" name="file2_descr" class="glm-form-text-input glm-char-count" value="{$event.fieldData.file2_descr}" data-msgArea="file_descr_msg2" maxlength="165">
+                <input type="text" name="file2_descr" class="glm-form-text-input glm-char-count" value="{$event.fieldData.file2_descr|escape}" data-msgArea="file_descr_msg2" maxlength="165">
                 <br><span id="file_descr_msg2"></span>
                 {if $event.fieldFail.file2_descr}<p>{$event.fieldFail.file2_descr}</p>{/if}
             </td>
@@ -60,7 +60,7 @@
         <tr>
             <th {if $event.fieldRequired.file3_descr}class="glm-required"{/if}>&nbsp;&nbsp;&nbsp;Description:</th>
             <td {if $event.fieldFail.file3_descr}class="glm-form-bad-input" data-tabid="glm-event-files"{/if}>
-                <input type="text" name="file3_descr" class="glm-form-text-input glm-char-count" value="{$event.fieldData.file3_descr}" data-msgArea="file_descr_msg3" maxlength="165">
+                <input type="text" name="file3_descr" class="glm-form-text-input glm-char-count" value="{$event.fieldData.file3_descr|escape}" data-msgArea="file_descr_msg3" maxlength="165">
                 <br><span id="file_descr_msg3"></span>
                 {if $event.fieldFail.file3_descr}<p>{$event.fieldFail.file3_descr}</p>{/if}
             </td>
diff --git a/views/admin/events/editLocation.html b/views/admin/events/editLocation.html
index 7d9822b..954c5ce 100755
--- a/views/admin/events/editLocation.html
+++ b/views/admin/events/editLocation.html
@@ -91,7 +91,7 @@
                             <tr>
                                 <th>Location Name:</th>
                                 <td>
-                                    <input id="name_{$loc.id}" type="text" name="Loc{$loc.id}_name" value="{$loc.name}" class="glm-form-text-input-medium">
+                                    <input id="name_{$loc.id}" type="text" name="Loc{$loc.id}_name" value="{$loc.name|escape}" class="glm-form-text-input-medium">
                                 </td>
                             </tr>
                             <tr>
@@ -235,7 +235,7 @@
                 <tr>
                     <th>Location Name:</th>
                     <td>
-                        <input id="name_{ newLocID }" type="text" name="{ newLocID }_name" value="{$newLocation.fieldData.name}" class="glm-form-text-input-medium">
+                        <input id="name_{ newLocID }" type="text" name="{ newLocID }_name" value="{$newLocation.fieldData.name|escape}" class="glm-form-text-input-medium">
                     </td>
                 </tr>
                 <tr>
diff --git a/views/admin/events/editSchedule.html b/views/admin/events/editSchedule.html
index 2bcda6a..612375d 100644
--- a/views/admin/events/editSchedule.html
+++ b/views/admin/events/editSchedule.html
@@ -25,7 +25,7 @@
                             <tr>
                                 <th>Schedule Name:</th>
                                 <td>
-                                    <input id="recurSchedName_{$r.id}" data-id="{$r.id}" type="text" name="Recur{$r.id}_name" value="{$r.name}" class="glm-form-text-input-small recurrence-input">
+                                    <input id="recurSchedName_{$r.id}" data-id="{$r.id}" type="text" name="Recur{$r.id}_name" value="{$r.name|escape}" class="glm-form-text-input-small recurrence-input">
                                 </td>
                             </tr>
                             <tr><td colspan="2"><h2>Time Of Day For Event</h2></td></tr>
diff --git a/views/admin/events/editStatus.html b/views/admin/events/editStatus.html
index 600783a..3d1ce8a 100644
--- a/views/admin/events/editStatus.html
+++ b/views/admin/events/editStatus.html
@@ -214,7 +214,7 @@
         <tr>
             <th {if $event.fieldRequired.intro}class="glm-required"{/if}>Intro Text:</th>
             <td {if $event.fieldFail.intro}class="glm-form-bad-input" data-tabid="glm-event-descr"{/if}>
-                <input type="text" name="intro" class="glm-form-text-input glm-char-count" data-msgArea="intro-text-msg" value="{$event.fieldData.intro}" maxlength="165">
+                <input type="text" name="intro" class="glm-form-text-input glm-char-count" data-msgArea="intro-text-msg" value="{$event.fieldData.intro|escape}" maxlength="165">
                 <br><span id="intro-text-msg"></span>
                 {if $event.fieldFail.intro}<p>{$event.fieldFail.intro}</p>{/if}
             </td>
@@ -302,7 +302,7 @@
                             <tr>
                                 <th>Contact Name:</th>
                                 <td>
-                                    <input type="text" name="contact_name" value="{$event.fieldData.contact_name}" class="glm-form-text-input-small">
+                                    <input type="text" name="contact_name" value="{$event.fieldData.contact_name|escape}" class="glm-form-text-input-small">
                                 </td>
                             </tr>
                             <tr>
@@ -349,7 +349,7 @@
                     <tr>
                         <th {if $event.fieldRequired.admin_name}class="glm-required"{/if}>Admin Contact Name:</th>
                         <td {if $event.fieldFail.admin_name}class="glm-form-bad-input" data-tabid="glm-event-admin"{/if}>
-                            <input type="text" name="admin_name" value="{$event.fieldData.admin_name}" class="glm-form-text-input-medium">
+                            <input type="text" name="admin_name" value="{$event.fieldData.admin_name|escape}" class="glm-form-text-input-medium">
                             {if $event.fieldFail.admin_name}<p>{$event.fieldFail.admin_name}</p>{/if}<br>
                         </td>
                     </tr>
-- 
2.17.1