source: main/trunk/greenstone2/macros/users.dm@ 28898

Last change on this file since 28898 was 28898, checked in by ak19, 10 years ago
  1. The cgiargq query variable is now no longer escaped in the 3 simply or large forms that use it. fqv and other js escaped fields are unchanged, since the jssafe now ensures that backslashes are escaped for macro files, so these resolve correctly in query.dm. 2. securitytools.cpp and .h updated to additionally escape back slashes for macro files when javascript escaping. This is done by default, since jssafe variants of cgiargs are all that are used, and they're used in macro files. 3. Encoded versions of decodedcompressedoptions are now used in all macro files. They're always used in attributes, so the attrsafe version which is set in receptionist.cpp is used.
  • Property svn:executable set to *
  • Property svn:keywords set to Author Date Id Revision
File size: 4.9 KB
Line 
1# this file must be UTF-8 encoded
2
3package userslistusers
4
5_header_ {
6<html>
7<head>
8<title>_textlocu_</title>
9</head>
10<body bgcolor="#ffffff" text="#000000" link="#006666"
11 alink="#cc9900" vlink="#666633">
12}
13
14_content_ {}
15
16_contentstart_ {
17<h2>_textlocu_</h2>
18
19
20<table border=0 cellspacing=1 cellpadding=3 width=100%>
21<tr>
22 <th bgcolor="\#d0d0d0">_textuser_</th>
23 <th bgcolor="\#d0d0d0">_textas_</th>
24 <th bgcolor="\#d0d0d0">_textgroups_</th>
25 <th bgcolor="\#d0d0d0">_textcomment_</th>
26 <th>&nbsp;</th>
27</tr>
28}
29
30_contentend_ {
31</table>
32}
33
34_footer_ {
35</body>
36</html>
37}
38
39
40
41package usersedituser
42
43_header_ {
44<html>
45<head>
46<title>_If_("_cgiarguma_" eq "edituser",_textedituser_,_textadduser_)</title>
47</head>
48<body bgcolor="#ffffff" text="#000000" link="#006666"
49 alink="#cc9900" vlink="#666633">
50}
51
52_content_ {
53<h2>_If_("_cgiarguma_" eq "edituser",_textedituser_,_textadduser_)</h2>
54
55
56_users:messagestatus_
57
58<form name="edituser" method="post" action="_gwcgi_">
59<input type=hidden name="e" value="_decodedcompressedoptionsAttrsafe_">
60<input type=hidden name="a" value="um">
61<input type=hidden name="uma" value="_cgiargumaAttrsafe_">
62
63<table border=0>
64<tr><td>_authen:textusername_</td><td><input type="text" name="umun" value="_users:usersargun_" size=15></td>
65<td><font color=gray>_textaboutusername_</font></td>
66</tr>
67<tr><td>_authen:textpassword_</td><td><input type="text" name="umpw" value="_users:usersargpw_" size=9></td>
68<td><font color=gray>_textaboutpassword_
69_If_("_cgiarguma_" eq "edituser",_textoldpass_)
70</font></td></tr>
71<tr><td>_userslistusers:textas_</td><td>
72<select name="umus">
73<option value="enabled">_textenabled_
74<option value="disabled"_If_("_users:usersargus_" ne "enabled", selected)>_textdisabled_
75</select>
76</td></tr>
77<tr><td>_userslistusers:textgroups_</td><td colspan=2><input type="text" name="umug" value="_users:usersargug_" size=50></td></tr>
78<tr><td></td><td></td>
79<td><font color=gray>_textaboutgroups_</font><br/><font color=gray>_textavailablegroups_</font></td></tr>
80<tr><td>_userslistusers:textcomment_</td><td colspan=2><input type="text" name="umc" value="_users:usersargc_" size=50></td></tr>
81<tr><td></td><td colspan=2><input type="submit" name=beu value="submit">
82<input type="submit" name=uma value="cancel"></td></tr>
83</table>
84</form>
85}
86
87_footer_ {
88</body>
89</html>
90}
91
92
93
94
95package usersdeleteuser
96
97_header_ {
98<html>
99<head>
100<title>_textdeleteuser_</title>
101</head>
102<body bgcolor="#ffffff" text="#000000" link="#006666"
103 alink="#cc9900" vlink="#666633">
104}
105
106_content_ {
107
108<p>
109<table border=0>
110<tr><td>
111<form name="deleteuser" method="post" action="_gwcgi_">
112<input type=hidden name="e" value="_decodedcompressedoptionsAttrsafe_">
113<input type=hidden name="a" value="um">
114<input type=hidden name="uma" value="_cgiargumaAttrsafe_">
115<input type=hidden name="umun" value="_cgiargumunAttrsafe_">
116<font color=red>_textremwarn_</font>
117<input type="submit" name=cm value="no">
118<input type="submit" name=cm value="yes">
119</form>
120</td></tr>
121</table>
122}
123
124_footer_ {
125</body>
126</html>
127}
128
129
130
131package userschangepasswd
132
133_header_ {
134<html>
135<head>
136<title>_textchangepw_</title>
137</head>
138<body bgcolor="#ffffff" text="#000000" link="#006666"
139 alink="#cc9900" vlink="#666633">
140}
141
142_content_ {
143<h2>_textchangepw_</h2>
144<p><font color=gray>_usersedituser:textaboutpassword_</font>
145
146<p>_users:messagestatus_
147
148<p>
149<form name="changepasswd" method="post" action="_gwcgi_">
150<input type=hidden name="e" value="_decodedcompressedoptionsAttrsafe_">
151<input type=hidden name="a" value="um">
152<input type=hidden name="uma" value="_cgiargumaAttrsafe_">
153<table border=0>
154<tr><td align=right>_textoldpw_</td><td><input type="password" name="umpw" size=9></td></tr>
155<tr><td align=right>_textnewpw_</td><td><input type="password" name="umnpw1" size=9></td></tr>
156<tr><td align=right>_textretype_</td><td><input type="password" name="umnpw2" size=9></td></tr>
157<tr><td></td><td><input type="submit" name=bcp value="submit"></td></tr>
158</table>
159</table>
160</form>
161
162}
163
164
165package userschangepasswdok
166
167_header_ {
168<html>
169<head>
170<title>_userschangepasswd:textchangepw_</title>
171</head>
172<body bgcolor="#ffffff" text="#000000" link="#006666"
173 alink="#cc9900" vlink="#666633">
174}
175
176_content_ {
177<h2>_userschangepasswd:textchangepw_</h2>
178
179<p>_textsuccess_
180}
181
182
183
184package users
185
186_messageinvalidusername_ {<font color=red>_textinvalidusername_</font>}
187_messageinvalidpassword_ {<font color=red>_textinvalidpassword_</font>}
188_messageemptypassword_ {<font color=red>_textemptypassword_</font>}
189_messageuserexists_ {<font color=red>_textuserexists_</font>}
190
191_messageusernameempty_ {<font color=red>_textusernameempty_</font>}
192_messagepasswordempty_ {<font color=red>_textpasswordempty_</font>}
193_messagenewpass1empty_ {<font color=red>_textnewpass1empty_</font>}
194_messagenewpass2empty_ {_messagenewpass1empty_}
195_messagenewpassmismatch_ {<font color=red>_textnewpassmismatch_</font>}
196_messagenewinvalidpassword_ {<font color=red>_textnewinvalidpassword_</font>}
197_messagefailed_ {<font color=red>_textfailed_</font>}
Note: See TracBrowser for help on using the repository browser.