diff --git a/views/bootstrap/class.AddDocument.php b/views/bootstrap/class.AddDocument.php index 6ed0307ec..bda850df9 100644 --- a/views/bootstrap/class.AddDocument.php +++ b/views/bootstrap/class.AddDocument.php @@ -284,7 +284,7 @@ $(document).ready(function() { foreach ($res as $r) { if($r['reviewerUserID'] > 0) { $u = $dms->getUser($r['reviewerUserID']); - $tmp[] = $u->getFullName().' ('.$u->getLogin().')'; + $tmp[] = htmlspecialchars($u->getFullName().' ('.$u->getLogin().')'); } } if($tmp) { @@ -335,7 +335,7 @@ $(document).ready(function() { foreach ($res as $r) { if($r['reviewerGroupID'] > 0) { $u = $dms->getGroup($r['reviewerGroupID']); - $tmp[] = $u->getName(); + $tmp[] = htmlspecialchars($u->getName()); } } if($tmp) { @@ -394,7 +394,7 @@ $(document).ready(function() { foreach ($res as $r) { if($r['approverUserID'] > 0) { $u = $dms->getUser($r['approverUserID']); - $tmp[] = $u->getFullName().' ('.$u->getLogin().')'; + $tmp[] = htmlspecialchars($u->getFullName().' ('.$u->getLogin().')'); } } if($tmp) { @@ -446,7 +446,7 @@ $(document).ready(function() { foreach ($res as $r) { if($r['approverGroupID'] > 0) { $u = $dms->getGroup($r['approverGroupID']); - $tmp[] = $u->getName(); + $tmp[] = htmlspecialchars($u->getName()); } } if($tmp) { diff --git a/views/bootstrap/class.UpdateDocument.php b/views/bootstrap/class.UpdateDocument.php index 98e415362..ac9d7488e 100644 --- a/views/bootstrap/class.UpdateDocument.php +++ b/views/bootstrap/class.UpdateDocument.php @@ -203,6 +203,21 @@ function checkForm() ?> 0) { + $u = $dms->getUser($r['reviewerUserID']); + $tmp[] = htmlspecialchars($u->getFullName().' ('.$u->getLogin().')'); + } + } + if($tmp) { + echo '
'.getMLText('mandatory_reviewers').': '; + echo implode(', ', $tmp); + echo "
\n"; + } + } /* Check for mandatory reviewer without access */ foreach($res as $r) { if($r['reviewerUserID']) { @@ -238,6 +253,22 @@ function checkForm() ?> 0) { + $u = $dms->getGroup($r['reviewerGroupID']); + $tmp[] = htmlspecialchars($u->getName()); + } + } + if($tmp) { + echo '
'.getMLText('mandatory_reviewergroups').': '; + echo implode(', ', $tmp); + echo "
\n"; + } + } + /* Check for mandatory reviewer group without access */ foreach($res as $r) { if ($r['reviewerGroupID']) { @@ -280,6 +311,22 @@ function checkForm() ?> 0) { + $u = $dms->getUser($r['approverUserID']); + $tmp[] = htmlspecialchars($u->getFullName().' ('.$u->getLogin().')'); + } + } + if($tmp) { + echo '
'.getMLText('mandatory_approvers').': '; + echo implode(', ', $tmp); + echo "
\n"; + } + } + /* Check for mandatory approvers without access */ foreach($res as $r) { if($r['approverUserID']) { @@ -315,6 +362,22 @@ function checkForm() ?> 0) { + $u = $dms->getGroup($r['approverGroupID']); + $tmp[] = htmlspecialchars($u->getName()); + } + } + if($tmp) { + echo '
'.getMLText('mandatory_approvergroups').': '; + echo implode(', ', $tmp); + echo "
\n"; + } + } + /* Check for mandatory approver groups without access */ foreach($res as $r) { if ($r['approverGroupID']) {