Escape planet and rule names in templates.

[ndwebbie.git] / root / src / members / index.tt2

diff --git a/root/src/members/index.tt2 b/root/src/members/index.tt2
index 6f4b226a2ecb6f2aa573bca53199978827faafe9..da11c5230c0a128135592773a97024c67598f571 100644 (file)
--- a/root/src/members/index.tt2
+++ b/root/src/members/index.tt2
@@ -38,7 +38,7 @@
                <td>[% p.x %] </td>
                <td><a href="[% c.uri_for('/stats','galaxy',p.x,p.y) %]">[% p.y %]</a></td>
                <td><a href="[% c.uri_for('/stats','planet',p.id) %]">[% p.z %]</a></td>
-               <td align="center">[% p.ruler %] <b>OF</b> [% p.planet %]</td>
+               <td align="center">[% p.ruler | html %] <b>OF</b> [% p.planet | html %]</td>
                <td align="center">[% p.race %]</td>
                [% p.sizeimg = (p.size_gain_day == 0 ? 'stay' : (p.size_gain_day > 0 ? 'up' : 'down')) %]
                <td title="[% p.size_gain_day %] Today | [% p.size_gain %] Tick">[% p.size | commify %] <img src="/static/images/[% p.sizeimg %].png" alt="[% p.sizeimg %]"> </td>
@@ -119,6 +119,17 @@
        </p>
 </form>
 </fieldset>
+<fieldset class="forum-post"> <legend>Attack classes</legend>
+<form action="[% c.uri_for('postattackgroups') %]" method="post">
+<p>Pick the classes you use for your attack fleets:</p>
+<p>
+FiCo: <input type="checkbox" name="class" value="x"[% IF attackgroups.grep('x').size > 0 %] checked[%END%]>
+FrDe: <input type="checkbox" name="class" value="y"[% IF attackgroups.grep('y').size > 0 %] checked[%END%]>
+CrBs: <input type="checkbox" name="class" value="z"[% IF attackgroups.grep('z').size > 0 %] checked[%END%]>
+<input type="submit" name="cmd" value="Submit">
+</p>
+</form>
+</fieldset>
 <form action="[% c.uri_for('posthostupdate') %]" method="post">
 <fieldset class="forum-post"> <legend>Hostname</legend>
        <p>Hostname: