From 4ff01614d071303790ccb7dbf18eccbc01e33caa Mon Sep 17 00:00:00 2001
From: ivan <ivan>
Date: Fri, 4 Jan 2008 02:27:28 +0000
Subject: [PATCH 1/1] leftovers from XSSmas

---
 httemplate/edit/prepay_credit.cgi | 14 ++++----------
 httemplate/edit/rate_region.cgi   |  5 +----
 2 files changed, 5 insertions(+), 14 deletions(-)

diff --git a/httemplate/edit/prepay_credit.cgi b/httemplate/edit/prepay_credit.cgi
index c22904d6c..c32c04d16 100644
--- a/httemplate/edit/prepay_credit.cgi
+++ b/httemplate/edit/prepay_credit.cgi
@@ -22,31 +22,25 @@
 %$cgi->param('upmultiplier',   '1000000') unless $cgi->param('upmultiplier');
 %$cgi->param('downmultiplier', '1000000') unless $cgi->param('downmultiplier');
 %$cgi->param('totalmultiplier','1000000') unless $cgi->param('totalmultiplier');
-%
-%
-
 
 <% include("/elements/header.html",'Generate prepaid cards'. ($agent ? ' for '. $agent->agent : ''),
            menubar( 'Main Menu' => $p, ))
 %>
-% if ( $cgi->param('error') ) { 
-
-  <FONT SIZE="+1" COLOR="#FF0000">Error: <% $cgi->param('error') %></FONT>
-% } 
 
+<% include('/elements/error.html') %>
 
 <FORM ACTION="<%popurl(1)%>process/prepay_credit.cgi" METHOD="POST" NAME="OneTrueForm" onSubmit="document.OneTrueForm.submit.disabled=true">
 
 Generate
 <INPUT TYPE="text" NAME="num" VALUE="<% $cgi->param('num') || '(quantity)' %>" SIZE=10 MAXLENGTH=10 onFocus="if ( this.value == '(quantity)' ) { this.value = ''; }">
+
 <SELECT NAME="type">
 % foreach (qw(alpha alphanumeric numeric)) { 
-
   <OPTION<% $cgi->param('type') eq $_ ? ' SELECTED' : '' %>><% $_ %>
 % } 
-
 </SELECT>
- prepaid cards
+
+prepaid cards
 
 <BR>for <SELECT NAME="agentnum"><OPTION>(any agent)
 % foreach my $opt_agent ( qsearch('agent', { 'disabled' => '' } ) ) { 
diff --git a/httemplate/edit/rate_region.cgi b/httemplate/edit/rate_region.cgi
index bd3dcbd46..d55c0de43 100644
--- a/httemplate/edit/rate_region.cgi
+++ b/httemplate/edit/rate_region.cgi
@@ -40,11 +40,8 @@
       #'View all regions' => "${p}browse/rate_region.cgi",
     ))
 %>
-% if ( $cgi->param('error') ) { 
-
-<FONT SIZE="+1" COLOR="#ff0000">Error: <% $cgi->param('error') %></FONT><BR>
-% } 
 
+<% include('/elements/error.html') %>
 
 <FORM ACTION="<%$p1%>process/rate_region.cgi" METHOD=POST>
 
-- 
2.11.0