Index: user/messageselect.php =================================================================== RCS file: /cvsroot/moodle/moodle/user/messageselect.php,v retrieving revision 1.13.2.1 diff -u -r1.13.2.1 messageselect.php --- user/messageselect.php 14 Jun 2007 04:40:14 -0000 1.13.2.1 +++ user/messageselect.php 4 Dec 2007 18:16:44 -0000 @@ -5,11 +5,11 @@ $id = required_param('id',PARAM_INT); $messagebody = optional_param('messagebody','',PARAM_CLEANHTML); - $send = optional_param('send','',PARAM_ALPHA); + $send = optional_param('send','',PARAM_CLEAN); $returnto = optional_param('returnto','',PARAM_LOCALURL); - $preview = optional_param('preview','',PARAM_ALPHA); + $preview = optional_param('preview','',PARAM_CLEAN); $format = optional_param('format',FORMAT_MOODLE,PARAM_INT); - $edit = optional_param('edit','',PARAM_ALPHA); + $edit = optional_param('edit','',PARAM_CLEAN); $deluser = optional_param('deluser',0,PARAM_INT); if (!$course = get_record('course','id',$id)) { @@ -65,7 +65,9 @@ $formstart = ""; } - print_header($strtitle,$strtitle,"wwwroot/course/view.php?id=$course->id\">$course->shortname -> id\">".get_string("participants")." -> ".$strtitle,$formstart); + print_header("$course->shortname: ".$strtitle, $course->fullname, + 'id\">$course->shortname -> ".$strtitle, + $formstart); if ($count) { @@ -86,7 +88,7 @@ '; echo "

".get_string('previewhtml')."

\n".format_text(stripslashes($messagebody),$format)."\n
"; - echo "\n

\n"; + echo "\n

\n"; } elseif ($send) { $good = 1; $teachers = array();