Teamcal daynote patch

daynote.patch

Index: /trunk/includes/tcdaynote.class.php
===================================================================
--- /trunk/includes/tcdaynote.class.php (revision 32)
+++ /trunk/includes/tcdaynote.class.php (revision 107)
Index: /trunk/includes/showmonth.function.php
===================================================================
--- /trunk/includes/showmonth.function.php (revision 78)
+++ /trunk/includes/showmonth.function.php (revision 107)
@@ -371,9 +371,9 @@
       for ($i=1; $i<=$nofdays; $i=$i+1) {
          //Get general Daynote into $title if one exists
          if ($i<10) $dd="0".strval($i); else $dd=strval($i);
          if ( $N->findByDay($year.$monthno.$dd,"all",$CONF['options']['region']) ) {
-            $title=$N->daynote;
+            $title=htmlentities($N->daynote, ENT_QUOTES);
             $style="-note";
          } else {
             $title="";
             $style="";
@@ -832,9 +832,9 @@
                          * The personal daynote is appended to $title because it might
                          * contain a birthday text already. The style is overwritten.
                          * There can only be one marker.
                          */
-                        $title .= addslashes($N->daynote);
+                        $title .= htmlentities($N->daynote, ENT_QUOTES);
                         $style="-note";
                      }
                   }
                   
Index: /trunk/showyear.php
===================================================================
--- /trunk/showyear.php (revision 78)
+++ /trunk/showyear.php (revision 107)
@@ -276,9 +276,9 @@
                    */
                   $dd = sprintf("%02d",$n);
                   if ( $D->findByDay($showyear.$monthno.$dd,"all") ) {
                      $tt_settings=str_replace("Information",$LANG['showyear_tt_day'],$CONF['ovl_tt_settings']);
-                     $onmouseover=" onmouseover=\"return overlib('".$D->daynote."',".$tt_settings.");\"";
+                     $onmouseover=" onmouseover=\"return overlib('".htmlentities($D->daynote, ENT_QUOTES)."',".$tt_settings.");\"";
                      $onmouseout=" onmouseout=\"return nd();\"";
                      $addstyle.=" background-image: url(themes/".$theme."/img/ovl_daynote.gif); background-repeat: no-repeat; background-position: top right;";
                      $title="";
                   }