--- loncom/interface/lonsupportreq.pm	2014/01/20 17:25:41	1.78
+++ loncom/interface/lonsupportreq.pm	2015/06/09 21:22:57	1.79
@@ -1,5 +1,5 @@
 #
-# $Id: lonsupportreq.pm,v 1.78 2014/01/20 17:25:41 bisitz Exp $
+# $Id: lonsupportreq.pm,v 1.79 2015/06/09 21:22:57 damieng Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -116,11 +116,13 @@ sub print_request_form {
     my $sourceurl = $machine.$origurl;
     $server = $machine.&Apache::loncommon::cleanup_html($origurl);
     $server =~ s/\?.*$//;
-    my %lt = &Apache::lonlocal::texthash (
+    my %js_lt = &Apache::lonlocal::texthash (
                   email => 'The e-mail address you entered',
                   notv => 'is not a valid e-mail address',
                   rsub => 'You must include a subject',
                   rdes => 'You must include a description',
+    );
+    my %html_lt = &Apache::lonlocal::texthash (
                   name => 'Name',
                   subm => 'Submit Request',
                   emad => 'Your e-mail address',
@@ -147,18 +149,20 @@ sub print_request_form {
                   fini => 'Finish',
                   clfm => 'Clear Form',
     );
+    &js_escape(\%js_lt);
+    &html_escape(\%html_lt);
     my $scripttag = (<<"END");
 function validate() {
     if (validmail(document.logproblem.email) == false) {
-        alert("$lt{'email'}: "+document.logproblem.email.value+" $lt{'notv'}.");
+        alert("$js_lt{'email'}: "+document.logproblem.email.value+" $js_lt{'notv'}.");
         return;
     }
     if (document.logproblem.subject.value == '') {
-        alert("$lt{'rsub'}.");
+        alert("$js_lt{'rsub'}.");
         return;
     }
     if (document.logproblem.description.value == '') {
-        alert("$lt{'rdes'}.");
+        alert("$js_lt{'rdes'}.");
         return;
     }
     document.logproblem.submit();
@@ -299,7 +303,7 @@ ENDJS
                  &mt('(All fields marked with * are required.)').
                  '</span>'.
                  &Apache::lonhtmlcommon::row_closure().
-                 &Apache::lonhtmlcommon::row_title($lt{'name'},undef,$css[$num])."\n";
+                 &Apache::lonhtmlcommon::row_title($html_lt{'name'},undef,$css[$num])."\n";
     my $fullname = '';
     if ((defined($lastname) && $lastname ne '') && (defined($firstname) && $firstname ne '')) {
         $fullname = "$firstname $lastname"; 
@@ -312,13 +316,13 @@ ENDJS
         }
         $output .= '<input type="text" size="20" name="username" value="'.&HTML::Entities::encode($fullname,'"<>&').'" />'."\n";
     }
-    $output .= '&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type="button" value="'.$lt{'subm'}.'" onclick="validate()" />&nbsp;'.
+    $output .= '&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type="button" value="'.$html_lt{'subm'}.'" onclick="validate()" />&nbsp;'.
                 &Apache::lonhtmlcommon::row_closure()."\n";
     $num ++;
     $i = $num%2;
     $output .= &Apache::lonhtmlcommon::row_title(
                    '<span title="'.&mt('required').'">'.
-                   $lt{'emad'}.' <span class="LC_info">*</span></span>'
+                   $html_lt{'emad'}.' <span class="LC_info">*</span></span>'
                   ,undef,$css[$i]).
                '<input type="text" size="20" name="email" value="'.
                &HTML::Entities::encode($email,'"<>&').'" /><br />'."\n".
@@ -327,61 +331,61 @@ ENDJS
     $i = $num%2;
     if (($env{'user.name'} =~ /^$match_username$/) && (!$public)) {
         if ($homeserver) { 
-            $output .= &Apache::lonhtmlcommon::row_title($lt{'emac'},undef,$css[$i]).
+            $output .= &Apache::lonhtmlcommon::row_title($html_lt{'emac'},undef,$css[$i]).
                        '<input type="text" size="50" name="cc" value="" /><br />'."\n".
                        &Apache::lonhtmlcommon::row_closure();
             $num ++;
             $i = $num%2;
         }
     }
-    $output .= &Apache::lonhtmlcommon::row_title("$lt{'unme'}/$lt{'doma'}",undef,$css[$i]);
+    $output .= &Apache::lonhtmlcommon::row_title("$html_lt{'unme'}/$html_lt{'doma'}",undef,$css[$i]);
     my $udom_input = '<input type="hidden" name="udom" value="'.
                      &HTML::Entities::encode($udom,'"<>&').'" />'."\n";
     my $uname_input = '<input type="hidden" name="uname" value="'.
                       &HTML::Entities::encode($uname,'"<>&').'" />'."\n"; 
     if (($env{'user.name'} =~ /^$match_username$/) && 
         ($env{'user.domain'} =~ /^$match_domain$/) && (!$public)) {
-        $output .= '<i>'.$lt{'unme'}.'</i>:&nbsp;'.$uname.'&nbsp;&nbsp;<i>'.$lt{'doma'}.'</i>:&nbsp;'.$udom.$udom_input.$uname_input;
+        $output .= '<i>'.$html_lt{'unme'}.'</i>:&nbsp;'.$uname.'&nbsp;&nbsp;<i>'.$html_lt{'doma'}.'</i>:&nbsp;'.$udom.$udom_input.$uname_input;
     } else {
         my $udomform = '';
         my $unameform = '';
         if (($env{'user.domain'} =~ /^$match_domain$/) && (!$public)) {
-            $output .= $lt{'entu'};
+            $output .= $html_lt{'entu'};
         } elsif (($env{'user.name'} =~ /^$match_username$/) && (!$public)) { 
-            $output .= $lt{'chdo'};
+            $output .= $html_lt{'chdo'};
         } else {
-            $output .= $lt{'entr'};
+            $output .= $html_lt{'entr'};
         }
         $output .= '<br />'."\n";
         if (!$public) {
             if ($env{'user.domain'} =~ /^$match_domain$/) {
-                $udomform = '<i>'.$lt{'doma'}.'</i>:&nbsp;'.$udom.$udom_input;
+                $udomform = '<i>'.$html_lt{'doma'}.'</i>:&nbsp;'.$udom.$udom_input;
             } elsif ($env{'user.name'} =~ /^$match_username$/) {
-                $unameform = '<i>'.$lt{'unme'}.'</i>:&nbsp;'.$uname.'&nbsp;&nbsp;'.$uname_input;
+                $unameform = '<i>'.$html_lt{'unme'}.'</i>:&nbsp;'.$uname.'&nbsp;&nbsp;'.$uname_input;
             }
         }
         if ($udomform eq '') {
-            $udomform = '<i>'.$lt{'doma'}.'</i>:&nbsp;';
+            $udomform = '<i>'.$html_lt{'doma'}.'</i>:&nbsp;';
             $udomform .= &Apache::loncommon::select_dom_form($codedom,'udom')."\n";
         }
         if ($unameform eq '') {
-            $unameform= '<i>'.$lt{'unme'}.'</i>:&nbsp;<input type="text" size="20" name="uname" value="'.$uname.'" />&nbsp;&nbsp;';
+            $unameform= '<i>'.$html_lt{'unme'}.'</i>:&nbsp;<input type="text" size="20" name="uname" value="'.$uname.'" />&nbsp;&nbsp;';
         }
         $output .= $unameform.$udomform;
     }
     $output .= &Apache::lonhtmlcommon::row_closure();
     $num ++;
     $i = $num%2;
-    $output .= &Apache::lonhtmlcommon::row_title("$lt{'urlp'}",undef,$css[$i]).
+    $output .= &Apache::lonhtmlcommon::row_title("$html_lt{'urlp'}",undef,$css[$i]).
                $server."\n".'<input type="hidden" name="sourceurl" value="'.
                &HTML::Entities::encode($sourceurl,'"<>&').'" />'."\n".
                &Apache::lonhtmlcommon::row_closure().
-               &Apache::lonhtmlcommon::row_title("$lt{'phon'}",undef,'LC_evenrow_value').
+               &Apache::lonhtmlcommon::row_title("$html_lt{'phon'}",undef,'LC_evenrow_value').
                '<input type="text" size="15" name="phone" /><br />'."\n".
                &Apache::lonhtmlcommon::row_closure();
     $num ++;
     $i = $num%2; 
-    $output .= &Apache::lonhtmlcommon::row_title("$lt{'crsd'}$details_title",undef,$css[$i]);
+    $output .= &Apache::lonhtmlcommon::row_title("$html_lt{'crsd'}$details_title",undef,$css[$i]);
     if ($cnum) {
         if ($coursecodes{$cnum}) {
             foreach my $item (@codetitles) {
@@ -389,14 +393,14 @@ ENDJS
             }
             $output .= '&nbsp;<input type="hidden" name="coursecode" value="'.&HTML::Entities::encode($coursecodes{$cnum},'"<>&').'" />'."\n";
         } else {
-            $output .= $lt{'enin'}.':&nbsp;
+            $output .= $html_lt{'enin'}.':&nbsp;
                   <input type="text" name="coursecode" size="15" value="" />'."\n";
         }
     } else {
         if ($totcodes > 0) {
             my $numtitles = @codetitles;
             if ($numtitles == 0) {
-                $output .= $lt{'enin'}.':&nbsp;
+                $output .= $html_lt{'enin'}.':&nbsp;
                   <input type="text" name="coursecode" size="15" value="" />'."\n";
             } else {
                 my @standardnames = &Apache::loncommon::get_standard_codeitems();
@@ -406,7 +410,7 @@ ENDJS
                 } 
                 $output .= '<table><tr><td>'.$codetitles[0].'<br />'."\n".
                       '<select name="'.$standardnames[0].'" onchange="courseSet('."'$codetitles[0]'".')">'."\n".
-                      ' <option value="-1">'.$lt{'sele'}."</option>\n";
+                      ' <option value="-1">'.$html_lt{'sele'}."</option>\n";
                 my @items = ();
                 my @longitems = ();
                 if ($idlist{$codetitles[0]} =~ /","/) {
@@ -435,7 +439,7 @@ ENDJS
                 for (my $i=1; $i<$numtitles; $i++) {
                     $output .= '<td>'.$codetitles[$i].'<br />'."\n".
                      '<select name="'.$standardnames[$i].'" onchange="courseSet('."'$codetitles[$i]'".')">'."\n".
-                     '<option value="-1">&lt;-'.$lt{'pick'}.' '.$codetitles[$i-1].'</option>'."\n".
+                     '<option value="-1">&lt;-'.$html_lt{'pick'}.' '.$codetitles[$i-1].'</option>'."\n".
                      '</select>'."\n".
                      '</td>'."\n";
                 }
@@ -443,30 +447,30 @@ ENDJS
                 if ($numtitles > 4) {
                     $output .= '<br /><br />'.$codetitles[$numtitles].'<br />'."\n".
                           '<select name="'.$standardnames[$numtitles].'" onchange="courseSet('."'$codetitles[$numtitles]'".')">'."\n".
-                          '<option value="-1">&lt;-'.$lt{'pick'}.' '.$codetitles[$numtitles-1].'</option>'."\n".
+                          '<option value="-1">&lt;-'.$html_lt{'pick'}.' '.$codetitles[$numtitles-1].'</option>'."\n".
                           '</select>'."\n";
                 }
             }
         } else {
-            $output .= $lt{'enin'}.':&nbsp;
+            $output .= $html_lt{'enin'}.':&nbsp;
                   <input type="text" name="coursecode" size="15" value="" />'."\n";
         }
     }
     if ($ctitle) {
-        $output .= '<br /><i>'.$lt{'titl'}.'</i>:&nbsp;'.$ctitle.
+        $output .= '<br /><i>'.$html_lt{'titl'}.'</i>:&nbsp;'.$ctitle.
                    '<input type="hidden" name="title" value="'.
                    &HTML::Entities::encode($ctitle,'"<>&').'" />'."\n";
     } else {
-        $output .= '<br />'.$lt{'enct'}.':&nbsp;
+        $output .= '<br />'.$html_lt{'enct'}.':&nbsp;
                  <input type="text" name="title" size="25" value="" />'."\n";
     }
     $output .= &Apache::lonhtmlcommon::row_closure();
     $num ++;
     $i = $num%2;
-    $output .= &Apache::lonhtmlcommon::row_title($lt{'secn'},undef,$css[$i]);
+    $output .= &Apache::lonhtmlcommon::row_title($html_lt{'secn'},undef,$css[$i]);
     if ($sectionlist) {
         $output .= "<select name=\"section\"\n>".
-                   "  <option value=\"\" selected=\"selected\">$lt{'sele'}</option>\n";
+                   "  <option value=\"\" selected=\"selected\">$html_lt{'sele'}</option>\n";
         foreach my $id (sort(keys(%groupid))) {
             if ($id eq $groupid{$id} || $groupid{$id} eq '') {
                 $output .= "  <option value=".
@@ -475,7 +479,7 @@ ENDJS
             } else {
                 $output .= "  <option value=".
                            &HTML::Entities::encode($id,'"<>&').
-                           " >$id - ($lt{'lsec'}: $groupid{$id})</option>\n";
+                           " >$id - ($html_lt{'lsec'}: $groupid{$id})</option>\n";
             }
         }
         $output .= "</select>";
@@ -487,13 +491,13 @@ ENDJS
     $i = $num%2; 
     $output .= &Apache::lonhtmlcommon::row_title(
                    '<span title="'.&mt('required').'">'.
-                   $lt{'subj'}.' <span class="LC_info">*</span></span>'
+                   $html_lt{'subj'}.' <span class="LC_info">*</span></span>'
                   ,undef,'LC_oddrow_value').
                '<input type="text" size="40" name="subject" />'."\n".
                &Apache::lonhtmlcommon::row_closure().
                &Apache::lonhtmlcommon::row_title(
                    '<span title="'.&mt('required').'">'.
-                   $lt{'detd'}.' <span class="LC_info">*</span></span>'
+                   $html_lt{'detd'}.' <span class="LC_info">*</span></span>'
                   ,undef,'LC_evenrow_value').
                '<textarea rows="10" cols="45" name="description" style="word-wrap:normal;">'.
                '</textarea>'."\n".
@@ -502,9 +506,9 @@ ENDJS
     $i = $num%2; 
     if (($env{'user.name'} =~ /^$match_username$/) && (!$public)) {
         if ($homeserver) {
-            $output .= &Apache::lonhtmlcommon::row_title($lt{'opfi'},undef,$css[$i]).
+            $output .= &Apache::lonhtmlcommon::row_title($html_lt{'opfi'},undef,$css[$i]).
                        ' <input type="file" name="screenshot" size="20" /><br />'.
-                       "\n".$lt{'uplf'}."\n".
+                       "\n".$html_lt{'uplf'}."\n".
                        &Apache::lonhtmlcommon::row_closure();
             $num ++;
             $i = $num%2;
@@ -525,17 +529,17 @@ ENDJS
             $i = $num%2;
         }
     }
-    $output .= &Apache::lonhtmlcommon::row_title($lt{'fini'},undef,$css[$i]);
+    $output .= &Apache::lonhtmlcommon::row_title($html_lt{'fini'},undef,$css[$i]);
     $output .= <<END;
              <table border="0" cellpadding="8" cellspacing="0">
               <tr>
                <td>
                 <input type="hidden" name="command" value="process" />
-                <input type="button" value="$lt{'subm'}" onclick="validate()" /> &nbsp;
+                <input type="button" value="$html_lt{'subm'}" onclick="validate()" /> &nbsp;
                </td>
                <td>&nbsp;</td>
                <td>
-                <input type="reset" value="$lt{'clfm'}" />
+                <input type="reset" value="$html_lt{'clfm'}" />
                </td>
               </tr>
              </table>