MyShaarli/tpl/import.html

<!DOCTYPE html>
<html>
<head>{include="includes"}</head>
<body onload="document.uploadform.filetoupload.focus();">
<div id="pageheader">
	{include="page.header"}
	<div id="uploaddiv">
	Import Netscape HTML bookmarks (as exported from Firefox/Chrome/Opera/Delicious/Diigo...) (Max: {$maxfilesize} bytes).
	<form method="POST" action="?do=upload" enctype="multipart/form-data" name="uploadform" id="uploadform">
	    <input type="hidden" name="token" value="{$token}">
	    <input type="file" name="filetoupload">
	    <input type="hidden" name="MAX_FILE_SIZE" value="{$maxfilesize}">
	    <input type="submit" name="import_file" value="Import" class="bigbutton"><br>
	    <input type="checkbox" name="private" id="private"><label for="private">&nbsp;Import all links as private</label><br>
	    <input type="checkbox" name="overwrite" id="overwrite"><label for="overwrite">&nbsp;Overwrite existing links</label>
	</form>
	</div>
</div>
{include="page.footer"}
</body>
</html>
Initial commit (version 0.0.40 beta) 2013-02-26 10:09:41 +01:00			`<!DOCTYPE html>`
			`<html>`
			`<head>{include="includes"}</head>`
			`<body onload="document.uploadform.filetoupload.focus();">`
			`<div id="pageheader">`
			`{include="page.header"}`
			`<div id="uploaddiv">`
Working on shaarli/Shaarli#224 I reviewed character escaping everywhere with the following ideas: * use a single common function to escape user data: `escape` using `htmlspecialchars`. * sanitize fields in `index.php` after reading them from datastore and before sending them to templates. It means no escaping function in Twig templates. 2 reasons: * it reduces risks of security issue for future user made templates * more readable templates * sanitize user configuration fields after loading them. 2015-06-11 13:53:27 +02:00			`Import Netscape HTML bookmarks (as exported from Firefox/Chrome/Opera/Delicious/Diigo...) (Max: {$maxfilesize} bytes).`
Initial commit (version 0.0.40 beta) 2013-02-26 10:09:41 +01:00			`<form method="POST" action="?do=upload" enctype="multipart/form-data" name="uploadform" id="uploadform">`
			`<input type="hidden" name="token" value="{$token}">`
W3C compliance (work on issue #64 - https://github.com/shaarli/Shaarli/issues/64): * fix duplicate IDs - #paging_older, #paging_newer become classes as the paging is displayed twice (top, bottom) in the linklist * fix duplicate IDs - #paging_privatelinks and #paging_linksperpage become classes * daily links are now valid (use &amp) * name attribute is not used anymore on a tag in link list * center tag is replaced by CSS in picwall and tag cloud * action in form tag can't be empty, use # instead * fixed configure table with CSS instead of cellpadding, border, and valign * export links are now valid * remove "size" in input tag * Fix missing alt attributes for img elements * tpl/daily: Use HTML entities instead of char escape codes * tpl/export: fix missing </span> closing tag * Remove obsolete language attribute on <script> elements 2014-12-12 17:01:02 +01:00			`<input type="file" name="filetoupload">`
Working on shaarli/Shaarli#224 I reviewed character escaping everywhere with the following ideas: * use a single common function to escape user data: `escape` using `htmlspecialchars`. * sanitize fields in `index.php` after reading them from datastore and before sending them to templates. It means no escaping function in Twig templates. 2 reasons: * it reduces risks of security issue for future user made templates * more readable templates * sanitize user configuration fields after loading them. 2015-06-11 13:53:27 +02:00			`<input type="hidden" name="MAX_FILE_SIZE" value="{$maxfilesize}">`
Initial commit (version 0.0.40 beta) 2013-02-26 10:09:41 +01:00			`<input type="submit" name="import_file" value="Import" class="bigbutton"><br>`
			`<input type="checkbox" name="private" id="private"><label for="private"> Import all links as private</label><br>`
			`<input type="checkbox" name="overwrite" id="overwrite"><label for="overwrite"> Overwrite existing links</label>`
			`</form>`
			`</div>`
			`</div>`
			`{include="page.footer"}`
			`</body>`
			`</html>`