Some small changes

diff --git a/devedit.pl b/devedit.pl
index 76dd3c46af4e75fd0470b813d546ceec4da755b8..3fd8641090a462d049fd5b0d715968905e49cbe7 100644 (file)
--- a/devedit.pl
+++ b/devedit.pl
@@ -6,7 +6,7 @@
 # Dev-Editor's main program
 #
 # Author:        Patrick Canterino <patrick@patshaping.de>
-# Last modified: 2005-04-16
+# Last modified: 2005-04-22
 #
 
 use strict;
@@ -87,7 +87,7 @@ if($newfile ne '' && $newfile !~ /^\s+$/)
 
  unless(-r $new_physical && -w $new_physical && -x $new_physical)
  {
-  abort($config->{'errors'}->{'dir_no_create'},'/',{DIR => $new_virtual});
+  abort($config->{'errors'}->{'dir_no_create'},'/',{DIR => encode_html($new_virtual)});
  }
 
  # Create the physical and the virtual path

diff --git a/modules/Command.pm b/modules/Command.pm
index 2e0933b6b9f3a122592337ca4fcd5f29778cfa51..bbad3f105eff30a7164c7aff67cc0b6f279bde48 100644 (file)
--- a/modules/Command.pm
+++ b/modules/Command.pm
@@ -281,7 +281,6 @@ sub exec_beginedit($$)
  my $physical       = $data->{'physical'};
  my $virtual        = $data->{'virtual'};
  my $dir            = upper_path($virtual);
- my $cgi            = $data->{'cgi'};
 
  return error($config->{'errors'}->{'link_edit'},$dir) if(-l $physical);
  return error($config->{'errors'}->{'dir_edit'}, $dir) if(-d $physical);
@@ -618,7 +617,7 @@ sub exec_copy($$)
    }
   }
 
-  copy($physical,$new_physical) or return error($config->{'errors'}->{'copy_failed'},$dir,{FILE => $virtual, NEW_FILE => $new_virtual});
+  copy($physical,$new_physical) or return error($config->{'errors'}->{'copy_failed'},$dir,{FILE => encode_html($virtual), NEW_FILE => $new_virtual->{'html'}});
   return devedit_reload({command => 'show', file => $new_dir});
  }
  else

diff --git a/modules/Output.pm b/modules/Output.pm
index 9ef361c8c926e5f940a2a8a1fce2832b35d88066..cd4e53eaeda032a001e01c18863ed62d6f9c20cb 100644 (file)
--- a/modules/Output.pm
+++ b/modules/Output.pm
@@ -60,7 +60,7 @@ sub error($;$$)
  $tpl->read_file($tpl_error);
 
  $tpl->fillin('ERROR',$message);
- $tpl->fillin('BACK',$path);
+ $tpl->fillin('BACK',encode_html($path));
  $tpl->fillin('BACK_URL',escape($path));
  $tpl->fillin('SCRIPT',encode_html($ENV{'SCRIPT_NAME'}));