--- loncom/interface/lonsimplepage.pm	2006/07/20 03:11:52	1.45
+++ loncom/interface/lonsimplepage.pm	2006/08/16 19:40:46	1.47
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Simple Page Editor
 #
-# $Id: lonsimplepage.pm,v 1.45 2006/07/20 03:11:52 raeburn Exp $
+# $Id: lonsimplepage.pm,v 1.47 2006/08/16 19:40:46 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -38,6 +38,7 @@ use Apache::lonlocal;
 use Apache::lonprintout;
 use Apache::lonxml;
 use Apache::longroup;
+use HTML::Entities();
 use LONCAPA;
 
 sub handler {
@@ -182,7 +183,7 @@ sub handler {
     }
 
     if ($forcestudent or $target eq 'tex') { $allowed=0; }
-    
+
     if ($allowed) {
 	$r->print('<p>'.
 		  &Apache::loncommon::help_open_topic('Uploaded_Templates_TextBoxes','Help with filling in text boxes').'<br /><a href="'.$r->uri.'?forcestudent=1'.$refarg.'"><font size="+1">'.&mt('Show Student View').'</font></a>'.
@@ -235,8 +236,8 @@ sub handler {
 
 # ---------------------------------------------------------------- Get syllabus
     if ((($syllabus{'uploaded.lastmodified'}) && 
-         (($group ne '' && ($group_home_view || $group_edit_perm || 
-           $group_view_perm)) || ($group eq ''))) || ($allowed)) { 
+         (($group ne '' && ($group_home_view || $group_edit_perm ||  
+           $group_view_perm)) || ($group eq ''))) || ($allowed)) {
 	if ($syllabus{'uploaded.photourl'}) {
 	    &Apache::lonnet::allowuploaded('/adm/smppg',
 					   $syllabus{'uploaded.photourl'});
@@ -258,7 +259,8 @@ sub handler {
 		      '</form><form method="post">');
 	}
 	foreach (sort keys %syllabusfields) {
-	    if (($syllabus{$_}) || ($allowed)) {
+	    if (($syllabus{$_}) || ($allowed) || 
+                ($_ eq 'abb_links' && $group ne '')) {
 		my $message=$syllabus{$_};
 		&Apache::lonfeedback::newline_to_br(\$message);
 		$message
@@ -284,7 +286,7 @@ sub handler {
                         if ($env{'form.grade_target'} ne 'tex') {
                             $r->print(
                                       '<br />Title<br /><textarea cols="80" rows="2" name="'.$_.'">'.
-                                      $syllabus{$_}.
+                                      &HTML::Entities::encode($syllabus{$_},'"&<>').
                                       '</textarea><input type="submit" name="storesyl" value="Store" />');
                         } else {
                             my $safeinit;
@@ -310,7 +312,7 @@ sub handler {
 		    if ($allowed) {
 			if ($target ne 'tex') {
 			    $r->print('<br /><textarea cols="80" rows="24" name="'.$_.'" id="'.$_.'">'.
-				      $syllabus{$_}.
+                                      &HTML::Entities::encode($syllabus{$_},'"&<>').
 				      '</textarea><input type="submit" name="storesyl" value="Store" />');
 			} else {
 			    my $safeinit;