--- loncom/interface/lonsyllabus.pm	2006/03/21 21:50:49	1.50
+++ loncom/interface/lonsyllabus.pm	2006/08/16 19:40:46	1.54
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Syllabus
 #
-# $Id: lonsyllabus.pm,v 1.50 2006/03/21 21:50:49 albertel Exp $
+# $Id: lonsyllabus.pm,v 1.54 2006/08/16 19:40:46 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -38,6 +38,7 @@ use Apache::lonannounce;
 use Apache::lonlocal;
 use Apache::lonhtmlcommon;
 use Apache::lonspeller();
+use HTML::Entities();
 
 sub handler {
     my $r = shift;
@@ -71,12 +72,6 @@ sub handler {
     if ($target eq 'tex') {
 	$r->print(&Apache::lonprintout::print_latex_header($env{'form.latex_type'}));
     } 
-# ----------------------------------------------------- Force menu registration
-    my $addentries='';
-    if ($env{'form.register'}) {
-       $addentries=' onLoad="'.&Apache::lonmenu::loadevents().
-           '" onUnload="'.&Apache::lonmenu::unloadevents().'"';
-    }
 # -------------------------------------------------- Let's see who handles this
     my $externalsyllabus=$courseenv{'externalsyllabus'};
 
@@ -120,7 +115,6 @@ sub handler {
 	my $start_page = 
 	    &Apache::loncommon::start_page("Syllabus", $rss_link,
 					   {'function'       => $forcestudent,
-					    'add_entries'    => $addentries,
 					    'domain'         => $cdom,
 					    'force_register' =>
 						$env{'form.register'},});
@@ -135,7 +129,7 @@ sub handler {
     my $day = &Apache::lonannounce::showday(time,2,
 			 &Apache::lonannounce::readcalendar($cdom.'_'.$cnum));
     if ($target ne 'tex') {
-	$r->print($day. &Apache::lonrss::advertisefeeds($cnum,$cdom));
+	$r->print($day. &Apache::lonrss::advertisefeeds($cnum,$cdom,$forceedit));
     } else {
 	$r->print(&Apache::lonxml::xmlparse($r,'tex',$day));
     }
@@ -184,7 +178,9 @@ sub handler {
 # ----------------------------------------------------- Only if not public call
     if ($env{'user.environment'}) {
 # does this user have privileges to post, etc?
-       if ($env{'request.course.id'}) {
+       if ($env{'request.course.id'}
+	   && $cdom eq $env{'course.'.$env{'request.course.id'}.'.domain'}
+	   && $cnum eq $env{'course.'.$env{'request.course.id'}.'.num'}) {
           $allowed=&Apache::lonnet::allowed('mdc',$env{'request.course.id'});
 	  $privileged=$allowed;
 	  if (($syllabus{'uploaded.lastmodified'}) && (!$forceedit)) {
@@ -326,7 +322,7 @@ sub handler {
               if ($allowed) {
                  $r->print(
 	   '<br /><textarea cols="80" rows="12" name="'.$_.'" id="'.$_.'">'.
-			   $syllabus{$_}.
+			   &HTML::Entities::encode($syllabus{$_},'"&<>').
            '</textarea> <input type="submit" name="storesyl" value="Store" />');
 	      }
 	  }