encoding comments, add id to schedule export

Reviewed-on: #95

cms/comment_checks.php

@@ -134,13 +134,13 @@
     $justification_ascii = "EXTENDED";
   }
 
-  $comment_author_name_json = json_encode( $comment_author_name );
+  $comment_author_name_json = json_encode( htmlentities( $comment_author_name ) );
   
-  $comment_title_json = json_encode( $comment_title );
+  $comment_title_json = json_encode( htmlentities( $comment_title ) );
   
-  $comment_text_json = json_encode( $comment_text );
+  $comment_text_json = json_encode( htmlentities( $comment_text ) );
   
-  $justification_json = json_encode( $justification );
+  $justification_json = json_encode( htmlentities( $justification ) );
   
   $comment_timestamp_json = json_encode( $comment_timestamp );
   

cms/schedule.php

@@ -73,7 +73,9 @@ if ($result = mysqli_query($connection, $ep_retrieve)) {
     else {
       $status = "Reserved";
     }
-    $show_array[$id]  = array ( "date" => date('Y-m-d', strtotime($date) ), 
+    $show_array[$id]  = array ( 
+                                "id" => $id,
+                                "date" => date('Y-m-d', strtotime($date) ), 
                                 "title" => $title,
                                 "host" => $host,
                                 "status" => $status,
@@ -102,7 +104,8 @@ if ($result = mysqli_query($connection, $ep_retrieve)) {
     $id = $row['ep_num'];
     $date = $row['ep_date'];
     $status = $row['status'];
-    $show_array[$id]  = array ( "date" => date('Y-m-d', strtotime($date) ), 
+    $show_array[$id]  = array ( "id" => $id,
+                                "date" => date('Y-m-d', strtotime($date) ), 
                                 "title" => $status,
                                 "host" => "Unverified",
                                 "status" => "Processing",
@@ -121,7 +124,8 @@ if ($result = mysqli_query($connection, $ep_retrieve)) {
     $date = $row['ep_date'];
     $seconds_to_expiration = $row['seconds_to_expiration'];
     $minutes = floor($seconds_to_expiration / 60) + 1;
-    $show_array[$id]  = array ( "date" => date('Y-m-d', strtotime($date) ), 
+    $show_array[$id]  = array ( "id" => $id,
+                                "date" => date('Y-m-d', strtotime($date) ), 
                                 "title" => " Available again in $minutes minutes",
                                 "host" => "Unverified",
                                 "status" => "Locked",
@@ -153,7 +157,8 @@ if ($result = mysqli_query($connection, $ep_retrieve)) {
     $date = $row['date'];
     $title = $row['title'];
     $host = $row['host'];
-    $show_array[$id]  = array ( "date" => date('Y-m-d', strtotime($date) ), 
+    $show_array[$id]  = array ( "id" => $id,
+                                "date" => date('Y-m-d', strtotime($date) ), 
                                 "title" => $title,
                                 "host" => $host,
                                 "status" => "Finished",

hub/header.html

@@ -17,6 +17,13 @@
   #list1, #list2, #list3 {
           display:none;
   }
+  table.upload {
+	border-collapse: separate;
+    border-spacing: 0 0.75rem;
+  }
+  table.upload td {
+	  vertical-align: top;
+  }
   </style>
   <link rel="shortcut icon" href="https://hackerpublicradio.org/hpr.ico" >
   <link rel="alternate" type="application/rss+xml" title="Hacker Public Radio Opus RSS" href="https://hackerpublicradio.org/hpr_opus_rss.php" />

hub/upload.php

@@ -128,13 +128,13 @@ include 'header.html';
   </p>
   <h2><?php echo $status ?></h2>
   <form method="POST" action="upload_confirm.php" enctype="multipart/form-data">
-  <table>
+  <table class="upload">
     <tr>
       <td>Host Email (<a href="<?php echo "${baseurl}about.html#email"; ?>" target="_blank">?</a>):</td>
       <td><?php echo $email;?></td>
     </tr>
     <tr>
-      <td style="vertical-align:top;">Image: (<a href="<?php echo "${baseurl}about.html#image"; ?>" target="_blank">?</a>)</td>
+      <td>Image: (<a href="<?php echo "${baseurl}about.html#image"; ?>" target="_blank">?</a>)</td>
       <td>
       <?php 
       echo "<img src=\"$image_url\" alt=\"host image\" /><br /><small><em>";
@@ -168,7 +168,7 @@ include 'header.html';
       </td>
     </tr>
     <tr>
-      <td style="vertical-align:top;">Profile: (<a href="<?php echo "${baseurl}about.html#Profile"; ?>" target="_blank">?</a>)</td>
+      <td>Profile: (<a href="<?php echo "${baseurl}about.html#Profile"; ?>" target="_blank">?</a>)</td>
       <td>
         <noscript>
           <textarea name="host_profile" maxlength="2000" rows="10" cols="50" placeholder="Enter some text about yourself with links to your blog or other online presence."><?php echo htmlspecialchars($profile) ?></textarea>
@@ -178,7 +178,7 @@ include 'header.html';
     </tr>
   </table>
   <h2>Please fill in some information about this episode</h2>
-  <table>
+  <table class="upload">
     <tr>
       <td><strong>Title(*) (<a href="<?php echo "${baseurl}about.html#Title"; ?>" target="_blank">?</a>):</strong></td>
       <td><input required type="text" name="title" size="50" maxlength="100" placeholder="Enter a short descriptive title for your show."></td>
@@ -258,7 +258,7 @@ include 'header.html';
       </td>
     </tr>
     <tr>
-      <td style="vertical-align:top;"><strong>Upload Method: (<a href="<?php echo "${baseurl}about.html#upload_method"; ?>" target="_blank">?</a>)</strong></td>
+      <td><strong>Upload Method: (<a href="<?php echo "${baseurl}about.html#upload_method"; ?>" target="_blank">?</a>)</strong></td>
       <td>
         <em>You have the choice of the following upload options:</em> <br />
         <p>