From 352f1d1c7f2ac1d93aa78ec13ccc82b8613b7003 Mon Sep 17 00:00:00 2001
From: Lorenzo Giacomelli <l.giacomelli@asdynamics.it>
Date: Thu, 10 Mar 2016 14:31:25 +0100
Subject: [PATCH] fix strip_tag

---
 public/admin/editNotizie.php | 4 ++--
 public/archivio.php          | 2 +-
 public/categorySummary.php   | 4 ++++
 public/style/public.css      | 8 +++++++-
 4 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/public/admin/editNotizie.php b/public/admin/editNotizie.php
index 7226993..ec92588 100644
--- a/public/admin/editNotizie.php
+++ b/public/admin/editNotizie.php
@@ -51,8 +51,8 @@ try{
 		$save = PostHandler::get("action");
 		if(strcmp($save, "save")==0){
 			
-			$notizia->titolo = PostHandler::get("titolo");
-			$notizia->sottotitolo = PostHandler::get("sottotitolo");
+			$notizia->titolo = strip_tags(PostHandler::get("titolo"));
+			$notizia->sottotitolo = strip_tags(PostHandler::get("sottotitolo"));
 			$notizia->testo = PostHandler::get("testo");
 			$notizia->category = PostHandler::get("category");
 			
diff --git a/public/archivio.php b/public/archivio.php
index 6c8f761..d173567 100644
--- a/public/archivio.php
+++ b/public/archivio.php
@@ -53,7 +53,7 @@ try {
 	GUIHandler::generateHeadPublic();
 	GUIHandler::generateMenu();?>
 	
-	<div>
+	<div class="archivioDate">
 		<form method="POST">
 			<select name="day">
 				<?php 
diff --git a/public/categorySummary.php b/public/categorySummary.php
index a19e372..b5d84af 100644
--- a/public/categorySummary.php
+++ b/public/categorySummary.php
@@ -19,6 +19,10 @@ try{
 				array('$and'=>array(array("status"=>NotiziaModel::STATUS_ACCEPTED),array("category"=>$category))),
 				array("sort"=>array("about.data"=>-1),"limit"=>10)
 				);
+		
+		if (sizeof($notizie)>0){
+			$notizie = array_map(function($ele){$ele->testo = strip_tags($ele->testo);$ele->sottotitolo = strip_tags($ele->sottotitolo); return $ele; }, $notizie);
+		}
 	}	
 	else{
 		GUIHandler::redirect("index.php");
diff --git a/public/style/public.css b/public/style/public.css
index 4fd752e..2ae7509 100644
--- a/public/style/public.css
+++ b/public/style/public.css
@@ -21,7 +21,7 @@ body{font-family:lato, arial;}
 .topBanner > *{max-widht:100%;max-height:100%;}
 
 
-.menuContainer{position:relative;z-index:2;}
+.menuContainer{position:relative;}
 .menuBar{background-image:url("../images/menuBackground.png");background-repeat:repeat-x;font-weight:bold;height:45px;margin-top:2px;color:white;}
 .menuTab{display:inline-block;padding:15px 17px 15px 16px;font-size:12px;vertical-align:top;}
 .menuTab:hover{background-color:#0069a3;}
@@ -49,6 +49,8 @@ body{font-family:lato, arial;}
 .hiddenMenu{
 	background-color: #139be5;
     width:100%;
+    position:relative;
+    z-index:5;
 }
 .hiddenMenu > ul{list-style:none;padding:0px;margin:0px;}
 .categoryVoice{padding:10px 9px;font-size:12px;}
@@ -352,3 +354,7 @@ body{font-family:lato, arial;}
 .reader{border:solid #d6d6d6 1px;padding:5px;margin-bottom:5px;}
 .rotoBanner .not{}
 
+
+
+.archivioDate{padding:5px 30px;}
+.archivioDate select, .archivioDate input{padding:2px 10px; margin:5px 5px 0px; border:solid #1a9ee9 1px;}
\ No newline at end of file