Contracconfig Hooks WIP

Layout/default/Contract/Form.php

@@ -158,6 +158,13 @@
                   
                   <hr />
                   
+                  <div class="form-group row">
+                    <label class="col-lg-2 col-form-label" for="order_date">Bestelldatum</label>
+                    <div class="col-lg-10">
+                      <input type="text" class="form-control" name="order_date" id="order_date" value="<?=($contract->order_date) ? date("d.m.Y",$contract->order_date) : ""?>">
+                    </div>
+                  </div>
+                  
                   <div class="form-group row">
                     <label class="col-lg-2 col-form-label" for="finish_date">Fertigstellungsdatum</label>
                     <div class="col-lg-10">

Layout/default/Contractconfig/Form.php

@@ -72,11 +72,11 @@
                       <?php if($item->type == "enum"): ?>
                         <select class="form-control" name="itemvalues[<?=$item->id?>]">
                           <?php foreach($item->getTypedataArray() as $option): ?>
-                            <option value="<?=$option?>" <?=($item->getValue() == $option) ? "selected='selected'" : ""?>><?=$option?></option>
+                            <option value="<?=htmlentities($option)?>" <?=($item->getValue() == $option) ? "selected='selected'" : ""?>><?=htmlentities($option)?></option>
                           <?php endforeach; ?>
                         </select>
                       <?php else: ?>
-                        <input type="text" class="form-control <?=(is_array($error_items) && in_array($item->id, $error_items)) ? "invalid" : ""?>" name="itemvalues[<?=$item->id?>]" value="<?=(isset($request)) ? $request->itemvalues[$item->id] : $item->getValue()?>" />
+                        <input type="text" class="form-control <?=(is_array($error_items) && in_array($item->id, $error_items)) ? "invalid" : ""?>" name="itemvalues[<?=$item->id?>]" value="<?=(isset($request)) ? htmlentities($request->itemvalues[$item->id]) : htmlentities($item->getValue())?>" />
                     <?php endif; ?>
                       <small><?=$item->description?></small>
                     </td>

Layout/default/Contractconfiggroup/Index.php

@@ -187,7 +187,7 @@
                                   <div class="col-md-4">
                                     <div class="form-group">
                                       <label for="item_<?=$item->id?>_displayname">Anzeigename</label>
-                                      <input type="text" class="form-control" id="item_<?=$item->id?>_displayname" name="displayname" value="<?=$item->displayname?>" />
+                                      <input type="text" class="form-control" id="item_<?=$item->id?>_displayname" name="displayname" value="<?=htmlentities($item->displayname)?>" />
                                     </div>
                                   </div>