java/nekurak.net-web/web/WEB-INF/tags/nekurak/komentareVypis.tag
author František Kučera <franta-hg@frantovo.cz>
Tue, 08 Jun 2010 09:09:17 +0200
changeset 130 1bbff3f5181f
parent 129 420d7024f6f4
child 134 4bd1e353c527
permissions -rw-r--r--
komentáře – escapování a EJB
     1 <?xml version="1.0" encoding="UTF-8"?>
     2 <jsp:root xmlns:jsp="http://java.sun.com/JSP/Page"
     3 	  xmlns:c="http://java.sun.com/jsp/jstl/core"
     4 	  xmlns:fmt="http://java.sun.com/jsp/jstl/fmt"
     5 	  xmlns:fn="http://java.sun.com/jsp/jstl/functions"
     6 	  xmlns:nkfn="/WEB-INF/nekurakFunkce"
     7 	  version="2.0">
     8 
     9     <jsp:directive.attribute name="podnik" type="cz.frantovo.nekurak.dto.Podnik" required="true"/>
    10 
    11     <div class="komentare">
    12 	<h3><fmt:message key="komentare.vypisNadpis"/></h3>
    13 
    14 	<!-- Zatím nikdo nekomentoval? -->
    15 	<c:if test="${fn:length(podnik.komentare) == 0}">
    16 	    <p><fmt:message key="komentare.zadneKomentare"/></p>
    17 	</c:if>
    18 
    19 	<!-- Komentovat! -->
    20 	<c:choose>
    21 	    <c:when test="${prihlasenyUzivatel == null}">
    22 		<p><fmt:message key="komentare.prihlasitSe"/></p>
    23 	    </c:when>
    24 	    <c:otherwise>
    25 		<p><a href="javascript:komentare.zobrazFormular()"><fmt:message key="komentare.komentovat"/></a></p>
    26 		<div id="formularKomentuj" style="display: none;">
    27 		    <form method="post" action="?akce=odeslatKomentar">
    28 		    <fieldset>
    29 			<input type="hidden" name="podnik" maxlength="255" value="${podnik.id}"/>
    30 			<label><fmt:message key="komentare.nadpis"/>: <input type="text" name="nadpis" maxlength="255"/></label>
    31 			<br/>
    32 			<textarea name="komentar" cols="30" rows="10"></textarea>
    33 			<br/>
    34 			<select name="typ">
    35 			    <option value="PROSTY_TEXT" selected="selected"><fmt:message key="komentar.typ.prostyText"/></option>
    36 			    <option value="XHTML"><fmt:message key="komentar.typ.xhtml"/></option>
    37 			    <option value="TEXY"><fmt:message key="komentar.typ.texy"/></option>
    38 			</select>
    39 			<br/>
    40 			<button value="submit"><fmt:message key="komentare.tlacitkoOdeslat"/></button>
    41 		    </fieldset>
    42 		</form>
    43 		</div>
    44 	    </c:otherwise>
    45 	</c:choose>
    46 
    47 	<!-- Výpis komentářů -->
    48 	<c:forEach var="k" items="${podnik.komentare}">
    49 	    <div class="komentar">
    50 		<h4>
    51 		    <fmt:message key="komentare.napsal"/>: <c:out value="${k.uzivatel}" />,
    52 		    <fmt:formatDate value="${k.datum}" pattern="dd. MMMM yyyy HH:mm"/>
    53 		    <br/>
    54 		    <fmt:message key="komentare.nadpis"/>: <c:out value="${k.nadpis}" />
    55 		</h4>
    56 		<!-- Pozor: předpokládáme, že v DB jsou pouze zkontrolovaná data -->
    57 		<c:out value="${k.komentar}" escapeXml="false" />
    58 	    </div>
    59 	</c:forEach>
    60     </div>
    61 
    62 </jsp:root>