From fae2de3d34497c5132d83e8837ba47aa46e1f2a1 Mon Sep 17 00:00:00 2001
From: "What.CD" <committer@what.cd>
Date: Sun, 19 Jun 2011 08:00:06 +0000
Subject: [PATCH] Should be escaped

Forum mods show up in staffpm system
---
 sections/staff/index.php        | 2 +-
 sections/staffpm/assign.php     | 2 +-
 sections/staffpm/user_inbox.php | 2 +-
 sections/staffpm/viewconv.php   | 2 +-
 sections/user/takemoderate.php  | 1 -
 sections/user/user.php          | 3 +--
 6 files changed, 5 insertions(+), 7 deletions(-)

diff --git a/sections/staff/index.php b/sections/staff/index.php
index 74b3ea14..1aa15c14 100644
--- a/sections/staff/index.php
+++ b/sections/staff/index.php
@@ -27,7 +27,7 @@
 				<strong>Send to: </strong>
 				<select name="level">
 					<option value="0" selected="selected">First Line Support</option>
-					<option value="700">Staff</option>
+					<option value="650">Staff</option>
 				</select>
 				
 				<input type="submit" value="Send message" />
diff --git a/sections/staffpm/assign.php b/sections/staffpm/assign.php
index 2d984c47..efa7f662 100644
--- a/sections/staffpm/assign.php
+++ b/sections/staffpm/assign.php
@@ -11,7 +11,7 @@
 	
 	if ($Level == 0) {
 		// FLS conversation, assign to staff (moderator)
-		$DB->query("UPDATE staff_pm_conversations SET Level=700 WHERE ID=$ConvID");
+		$DB->query("UPDATE staff_pm_conversations SET Level=650 WHERE ID=$ConvID");
 
 		header('Location: staffpm.php');
 		
diff --git a/sections/staffpm/user_inbox.php b/sections/staffpm/user_inbox.php
index 9a2768e1..6fcd4c08 100644
--- a/sections/staffpm/user_inbox.php
+++ b/sections/staffpm/user_inbox.php
@@ -41,7 +41,7 @@
 			<strong>Send to: </strong>
 			<select name="level">
 				<option value="0" selected="selected">First Line Support</option>
-				<option value="700">Staff</option>
+				<option value="650">Staff</option>
 			</select>
 			<input type="submit" value="Send message" />
 		</form>
diff --git a/sections/staffpm/viewconv.php b/sections/staffpm/viewconv.php
index f8a016a6..82ee8276 100644
--- a/sections/staffpm/viewconv.php
+++ b/sections/staffpm/viewconv.php
@@ -149,7 +149,7 @@
 			// Staff classes
 			foreach ($ClassLevels as $Class) { 
 				// Create one <option> for each staff user class
-				if ($Class['Level'] >= 700) {
+				if ($Class['Level'] >= 650) {
 					$Selected = (!$AssignedToUser && ($Level == $Class['Level'])) ? ' selected="selected"' : '';
 ?>
 							<option value="class_<?=$Class['Level']?>"<?=$Selected?>><?=$Class['Name']?></option>
diff --git a/sections/user/takemoderate.php b/sections/user/takemoderate.php
index 91257c94..cbe32b4e 100644
--- a/sections/user/takemoderate.php
+++ b/sections/user/takemoderate.php
@@ -144,7 +144,6 @@
 	die();
 }
 
-
 // User was not deleted. Perform other stuff.
 
 $UpdateSet = array();
diff --git a/sections/user/user.php b/sections/user/user.php
index 4aa0a52e..2333ed9d 100644
--- a/sections/user/user.php
+++ b/sections/user/user.php
@@ -585,7 +585,7 @@ function check_paranoia_here($Setting) {
 <?		
 		foreach($RecentSnatches as $RS) { ?>
 			<td>
-				<a href="torrents.php?id=<?=$RS['ID']?>" title="<?=$RS['Artist']?><?=$RS['Name']?>"><img src="<?=$RS['WikiImage']?>" alt="<?=$RS['Artist']?><?=$RS['Name']?>" width="107" /></a>
+				<a href="torrents.php?id=<?=$RS['ID']?>" title="<?=display_str($RS['Artist'])?><?=display_str($RS['Name'])?>"><img src="<?=$RS['WikiImage']?>" alt="<?=display_str($RS['Artist'])?><?=display_str($RS['Name'])?>" width="107" /></a>
 			</td>
 <?		} ?>
 		</tr>
@@ -813,7 +813,6 @@ function check_paranoia_here($Setting) {
 			</tr>
 <?
 	}
-
 	if (check_perms('users_edit_titles')) {
 ?>
 			<tr>