--- loncom/interface/londocs.pm	2007/06/29 23:25:30	1.281
+++ loncom/interface/londocs.pm	2007/07/03 00:30:47	1.284
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Documents
 #
-# $Id: londocs.pm,v 1.281 2007/06/29 23:25:30 albertel Exp $
+# $Id: londocs.pm,v 1.284 2007/07/03 00:30:47 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -122,16 +122,17 @@ sub dumpbutton {
     my ($home,$other,%outhash)=&authorhosts();
     my $type = &Apache::loncommon::course_type();
     if ($home+$other==0) { return ''; }
-    my $output='</td><td bgcolor="#DDDDCC">';
     if ($home) {
-	return '</td><td bgcolor="#DDDDCC">'.
+	return '<div>'.
 	    '<input type="submit" name="dumpcourse" value="'.
 	    &mt('Dump '.$type.' DOCS to Construction Space').'" />'.
-	    &Apache::loncommon::help_open_topic('Docs_Dump_Course_Docs');
+	    &Apache::loncommon::help_open_topic('Docs_Dump_Course_Docs').
+	    '</div>';
     } else {
-	return'</td><td bgcolor="#DDDDCC">'.
+	return '<div>'.
      &mt('Dump '.$type.
-	 ' DOCS to Construction Space: available on other servers');
+	 ' DOCS to Construction Space: available on other servers').
+	 '</div>';
     }
 }
 
@@ -199,9 +200,9 @@ sub dumpcourse {
 		$fail=1;
 	    }
 	    if ($fail) {
-		$r->print('<font color="red">fail</font>');
+		$r->print('<span class="LC_error">'.&mt('fail').'</span>');
 	    } else {
-		$r->print('<font color="green">ok</font>');
+		$r->print('<span class="LC_success">'.&mt('ok').'</span>');
 	    }
 	}
     } else {
@@ -257,10 +258,10 @@ sub dumpcourse {
 
 sub exportbutton {
     my $type = &Apache::loncommon::course_type();
-    return '</td><td bgcolor="#DDDDCC">'.
+    return '<div>'.
             '<input type="submit" name="exportcourse" value="'.
             &mt('Export '.$type.' to IMS').'" />'.
-    &Apache::loncommon::help_open_topic('Docs_Export_Course_Docs');
+    &Apache::loncommon::help_open_topic('Docs_Export_Course_Docs').'</div>';
 }
 
 sub exportcourse {
@@ -379,7 +380,7 @@ sub exportcourse {
                 }
                 $display .= ' />'."\n";
                 for (my $i=0; $i<$depth; $i++) {
-                    $display .= '<img src="/adm/lonIcons/whitespace1.gif" width="25" height="1" alt="" border="0" /><img src="/adm/lonIcons/whitespace1.gif" width="25" height="1" alt="" border="0" />'."\n";
+                    $display .= '<img src="/adm/lonIcons/whitespace1.gif" class="LC_docs_spacer" /><img src="/adm/lonIcons/whitespace1.gif" class="LC_docs_spacer" />'."\n";
                 }
                 if ($curRes->is_sequence()) {
                     $display .= '<img src="/adm/lonIcons/navmap.folder.open.gif">&nbsp;'."\n";
@@ -1255,7 +1256,7 @@ sub editor {
     my ($breadcrumbtrail,$randompick,$ishidden,$isencrypted,$plain)=&breadcrumbs($folder);
     $r->print($breadcrumbtrail);
     if ($fatal) {
-	   $r->print('<p><font color="red">'.$errtext.'</font></p>');
+	   $r->print('<p><span class="LC_error">'.$errtext.'</span></p>');
     } else {
 # ------------------------------------------------------------ Process commands
 
@@ -1296,7 +1297,7 @@ sub editor {
 # store the changed version
 		($errtext,$fatal)=&storemap($coursenum,$coursedom,$folder.'.'.$container);
 		if ($fatal) {
-		    $r->print('<p><font color="red">'.$errtext.'</font></p>');
+		    $r->print('<p><span class="LC_error">'.$errtext.'</span></p>');
 		    return;
 		}
 	    }
@@ -1336,7 +1337,7 @@ sub editor {
 # store the changed version
 		($errtext,$fatal)=&storemap($coursenum,$coursedom,$folder.'.'.$container);
 		if ($fatal) {
-		    $r->print('<p><font color="red">'.$errtext.'</font></p>');
+		    $r->print('<p><span class="LC_error">'.$errtext.'</span></p>');
 		    return;
 		}
 	    }
@@ -1370,7 +1371,7 @@ sub editor {
 # Store the result
 		($errtext,$fatal)=&storemap($coursenum,$coursedom,$folder.'.'.$container);
 		if ($fatal) {
-		    $r->print('<p><font color="red">'.$errtext.'</font></p>');
+		    $r->print('<p><span class="LC_error">'.$errtext.'</span></p>');
 		    return;
 		}
 
@@ -1427,7 +1428,7 @@ sub editor {
 		($errtext,$fatal)=&storemap($coursenum,$coursedom,
 					    $folder.'.'.$container);
 		if ($fatal) {
-		    $r->print('<p><font color="red">'.$errtext.'</font></p>');
+		    $r->print('<p><span class="LC_error">'.$errtext.'</span></p>');
 		    return;
 		}
             }
@@ -1447,7 +1448,7 @@ sub editor {
 		($errtext,$fatal)=&group_import($coursenum, $coursedom, $folder,
 					       $container,'londocs',@imports);
 		if ($fatal) {
-		    $r->print('<p><font color="red">'.$errtext.'</font></p>');
+		    $r->print('<p><span class="LC_error">'.$errtext.'</span></p>');
 		    return;
 		}
             }
@@ -1464,11 +1465,12 @@ sub editor {
   	          ($errtext,$fatal)=&storemap($coursenum,$coursedom,
 					   $folder.'.'.$container);
 	          if ($fatal) {
-		      $r->print('<p><font color="red">'.$errtext.'</font></p>');
+		      $r->print('<p><span class="LC_error">'.$errtext.'</span></p>');
 		      return;
 	          }
                } else {
-                   $r->print('<p><font color="red">'.&mt('No map selected.').'</font></p>');
+		    $r->print('<p><span class="LC_error">'.&mt('No map selected.').'</span></p>');
+
                }
            }
            &log_differences($plain);
@@ -1569,7 +1571,7 @@ sub process_file_upload {
         ($errtext,$fatal)=&storemap($coursenum,$coursedom,
 				    $folder.'.'.$container);
         if ($fatal) {
-            $$upload_output .= '<p><font color="red">'.$errtext.'</font></p>';
+            $$upload_output .= '<p><span class="LC_error">'.$errtext.'</span></p>';
             return 'failed';
         } else {
             if ($parseaction eq 'parse') {
@@ -1577,7 +1579,7 @@ sub process_file_upload {
                 if ($total_embedded > 0) {
                     my $num = 0;
 		    my $state = '
-   <input type="hidden" name="folderpath" value="'.$env{'form.folderpath'}.'" />
+   <input type="hidden" name="folderpath" value="'.&HTML::Entities::encode($env{'form.folderpath'},'<>&"').'" />
    <input type="hidden" name="cmd" value="upload_embedded" />
    <input type="hidden" name="newidx" value="'.$newidx.'" />
    <input type="hidden" name="primaryurl" value="'.&escape($url).'" />
@@ -1720,12 +1722,14 @@ sub entryline {
     if ($env{'form.folderpath'}) {
 	$type = 'folder';
         $container = 'sequence';
-	$esc_path=&escape($path = $env{'form.folderpath'});
+	$esc_path=&escape($env{'form.folderpath'});
+	$path = &HTML::Entities::encode($env{'form.folderpath'},'<>&"');
 	# $htmlfoldername=&HTML::Entities::encode($env{'form.foldername'},'<>&"');
     }
     if ($env{'form.pagepath'}) {
         $type = $container = 'page';
         $esc_path=&escape($path = $env{'form.pagepath'});
+	$path = &HTML::Entities::encode($env{'form.pagepath'},'<>&"');
         $symb=&escape($env{'form.pagesymb'});
     }
     my $cpinfo='';
@@ -1779,14 +1783,12 @@ sub entryline {
 	
 	if (!$nocopy) {
 	    $copylink=(<<ENDCOPY);
-<a href='javascript:markcopy("$esc_path","$index","$renametitle","$container","$symb","$folder");'>
-<font size="-2" color="#000099">$lt{'cp'}</font></a>
+<a href='javascript:markcopy("$esc_path","$index","$renametitle","$container","$symb","$folder");' class="LC_docs_copy">$lt{'cp'}</a>
 ENDCOPY
         }
 	if (!$nocut) {
 	    $cutlink=(<<ENDCUT);
-<a href='javascript:cutres("$esc_path","$index","$renametitle","$container","$symb","$folder");'>
-<font size="-2" color="#550044">$lt{'ct'}</font></a>
+<a href='javascript:cutres("$esc_path","$index","$renametitle","$container","$symb","$folder");' class="LC_docs_cut">$lt{'ct'}</a>
 ENDCUT
         }
 	$line.=(<<END);
@@ -1799,12 +1801,12 @@ ENDCUT
    <table border='0' cellspacing='2' cellpadding='0'>
       <tr>
          <td bgcolor="#DDDDDD">
-            <a href='/adm/coursedocs?cmd=up_$index&${type}path=$esc_path&${type}symb=$symb$cpinfo'><img src="${iconpath}move_up.gif" alt='$lt{'up'}' border='0' /></a>
+            <a href='/adm/coursedocs?cmd=up_$index&amp;${type}path=$esc_path&amp;${type}symb=$symb$cpinfo'><img src="${iconpath}move_up.gif" alt='$lt{'up'}' class="LC_icon" /></a>
          </td>
       </tr>
       <tr>
         <td bgcolor="#DDDDDD">
-           <a href='/adm/coursedocs?cmd=down_$index&${type}path=$esc_path&${type}symb=$symb$cpinfo'><img src="${iconpath}move_down.gif" alt='$lt{'dw'}' border='0' /></a>
+           <a href='/adm/coursedocs?cmd=down_$index&amp;${type}path=$esc_path&amp;${type}symb=$symb$cpinfo'><img src="${iconpath}move_down.gif" alt='$lt{'dw'}' class="LC_icon" /></a>
         </td>
       </tr>
     </table>
@@ -1813,9 +1815,9 @@ ENDCUT
    $selectbox
 </td>
 <td bgcolor="#DDDDDD">
-   <a href='javascript:removeres("$esc_path","$index","$renametitle","$container","$symb");'><font size="-2" color="#990000">$lt{'rm'}</font></a>
+   <a href='javascript:removeres("$esc_path","$index","$renametitle","$container","$symb");' class="LC_docs_remove">$lt{'rm'}</a>
 $cutlink
-   <a href='javascript:changename("$esc_path","$index","$renametitle","$container","$symb");'><font size="-2" color="#009900">$lt{'rn'}</font></a>
+   <a href='javascript:changename("$esc_path","$index","$renametitle","$container","$symb");' class="LC_docs_rename">$lt{'rn'}</a>
 $copylink
 </td>
 END
@@ -1921,10 +1923,10 @@ END
 					       $path.$pagearg.'.page');
 	}
 	$url.='pagepath='.&escape($pagepath).
-	    '&pagesymb='.&escape($symb).$cpinfo;
+	    '&amp;pagesymb='.&escape($symb).$cpinfo;
     }
     $line.='<td bgcolor="#FFFFBB"><a href="'.$url.'"><img src="'.$icon.
-	'" border="0"></a></td>'.
+	'" class="LC_icon" /></a></td>'.
         "<td bgcolor='#FFFFBB'>".($url?"<a href=\"$url\">":'').$title.
         ($url?'</a>':' <font size="-2">'.&mt('(re-initialize course to access)').'</font>')."</td>";
     if (($allowed) && ($folder!~/^supplemental/)) {
@@ -1937,9 +1939,9 @@ END
 	    ((&LONCAPA::map::getparameter($orderidx,'parameter_hiddenresource'))[0]=~/^yes$/i?' checked="1"':'');
 	$line.=(<<ENDPARMS);
 <td bgcolor="#BBBBFF"><font size='-2'>
-<nobr><label><input type="checkbox" name="hidprs_$orderidx" onClick="this.form.changeparms.value='hiddenresource';this.form.submit()" $hidtext /> $lt{'hd'}</label></nobr></td>
+<span class="LC_nobreak"><label><input type="checkbox" name="hidprs_$orderidx" onClick="this.form.changeparms.value='hiddenresource';this.form.submit()" $hidtext /> $lt{'hd'}</label></span></td>
 <td bgcolor="#BBBBFF"><font size='-2'>
-<nobr><label><input type="checkbox" name="encprs_$orderidx" onClick="this.form.changeparms.value='encrypturl';this.form.submit()" $enctext /> $lt{'ec'}</label></nobr></td>
+<span class="LC_nobreak"><label><input type="checkbox" name="encprs_$orderidx" onClick="this.form.changeparms.value='encrypturl';this.form.submit()" $enctext /> $lt{'ec'}</label></span></td>
 <td bgcolor="#BBBBFF"><font size="-2">$parameterset</font></td>
 ENDPARMS
     }
@@ -2009,17 +2011,17 @@ sub checkonthis {
                  if (($errorcount) ||
                      ($warningcount)) {
 		     if ($errorcount) {
-                        $r->print('<img src="/adm/lonMisc/bomb.gif" /><font color="red"><b>'.
+                        $r->print('<img src="/adm/lonMisc/bomb.gif" /><span class="LC_error">'.
 			  $errorcount.' '.
-				  &mt('error(s)').'</b></font> ');
+				  &mt('error(s)').'</span> ');
                      }
 		     if ($warningcount) {
-                        $r->print('<font color="blue">'.
+                        $r->print('<span class="LC_warning">'.
 			  $warningcount.' '.
-				  &mt('warning(s)').'</font>');
+				  &mt('warning(s)').'</span>');
                      }
                  } else {
-                     $r->print('<font color="green">'.&mt('ok').'</font>');
+                     $r->print('<span class="LC_success">'.&mt('ok').'</span>');
                  }
                  $r->rflush();
              }
@@ -2031,15 +2033,15 @@ sub checkonthis {
                  }
              }
           } elsif ($result eq 'unavailable') {
-             $r->print('<font color="red"><b>'.&mt('connection down').'</b></font>');
+             $r->print('<span class="LC_error">'.&mt('connection down').'</span>');
           } elsif ($result eq 'not_found') {
 	      unless ($url=~/\$/) {
-		  $r->print('<font color="red"><b>'.&mt('not found').'</b></font>');
+		  $r->print('<span class="LC_error">'.&mt('not found').'</b></font>');
 	      } else {
-		  $r->print('<font color="yellow"><b>'.&mt('unable to verify variable URL').'</b></font>');
+		  $r->print('<span class="LC_unknown">'.&mt('unable to verify variable URL').'</span>');
 	      }
           } else {
-             $r->print('<font color="red"><b>'.&mt('access denied').'</b></font>');
+             $r->print('<span class="LC_error">'.&mt('access denied').'</span>');
           }
       }
    }
@@ -2081,9 +2083,9 @@ sub verifycontent {
    foreach (keys %hash) {
        if ($hash{$_}=~/\.(page|sequence)$/) {
 	   if (($_=~/^src_/) && ($alreadyseen{&unescape($hash{$_})})) {
-	       $r->print('<hr /><font color="red">'.
+	       $r->print('<hr /><span class="LC_error">'.
 			 &mt('The following sequence or page is included more than once in your '.$type.': ').
-			 &unescape($hash{$_}).'</font><br />'.
+			 &unescape($hash{$_}).'</span><br />'.
 			 &mt('Note that grading records for problems included in this sequence or folder will overlap.<hr />'));
 	   }
        }
@@ -2163,7 +2165,7 @@ sub checkversions {
 			  $env{'course.'.$env{'request.course.id'}.'.num'}) eq 'ok') {		
 	    $r->print('<h1>'.&mt('Your Version Settings have been Saved').'</h1>');
 	} else {
-	    $r->print('<h1><font color="red">'.&mt('An Error Occured while Attempting to Save your Version Settings').'</font></h1>');
+	    $r->print('<h1><span class="LC_error">'.&mt('An Error Occured while Attempting to Save your Version Settings').'</span></h1>');
 	}
 	&mark_hash_old();
     }
@@ -2270,10 +2272,10 @@ ENDHEADERS
                                                      'lastrevisiondate')
                                                         ).
                       '</td>'.
-                      '<td title="'.$lt{'mr'}.'"><nobr>Most Recent: '.
+                      '<td title="'.$lt{'mr'}.'"><span class="LC_nobreak">Most Recent: '.
                       '<font size="+1">'.$currentversion.'</font>'.
-                      '</nobr></td>'.
-                      '<td title="'.$lt{'ve'}.'"><nobr>In '.$type.': '.
+                      '</span></td>'.
+                      '<td title="'.$lt{'ve'}.'"><span class="LC_nobreak">In '.$type.': '.
                       '<font size="+1">');
 # Used in course
 	    my $usedversion=$hash{'version_'.$linkurl};
@@ -2282,8 +2284,8 @@ ENDHEADERS
 	    } else {
 		$r->print($currentversion);
 	    }
-	    $r->print('</font></nobr></td><td title="'.$lt{'vu'}.'">'.
-                      '<nobr>Use: ');
+	    $r->print('</font></span></td><td title="'.$lt{'vu'}.'">'.
+                      '<span class="LC_nobreak">Use: ');
 # Set version
 	    $r->print(&Apache::loncommon::select_form($setversions{$linkurl},
 						      'set_version_'.$linkurl,
@@ -2292,7 +2294,7 @@ ENDHEADERS
 						       '' => '',
 						       'mostrecent' => 'most recent',
 						       map {$_,$_} (1..$currentversion))));
-	    $r->print('</nobr></td></tr><tr><td></td>');
+	    $r->print('</span></td></tr><tr><td></td>');
 	    my $lastold=1;
 	    for (my $prevvers=1;$prevvers<$currentversion;$prevvers++) {
 		my $url=$root.'.'.$prevvers.'.'.$extension;
@@ -2316,7 +2318,7 @@ ENDHEADERS
             my $cols_output = 1;
             for (my $prevvers=$lastold;$prevvers<$currentversion;$prevvers++) {
 		my $url=$root.'.'.$prevvers.'.'.$extension;
-		$r->print('<nobr><a href="'.&Apache::lonnet::clutter($url).
+		$r->print('<span class="LC_nobreak"><a href="'.&Apache::lonnet::clutter($url).
 			  '">'.&mt('Version').' '.$prevvers.'</a> ('.
 			  &Apache::lonlocal::locallocaltime(
                                 &Apache::lonnet::metadata($url,
@@ -2329,7 +2331,7 @@ ENDHEADERS
 			      '&versionone='.$prevvers.
 			      '">'.&mt('Diffs').'</a>');
 		}
-		$r->print('</nobr><br />');
+		$r->print('</span><br />');
                 if (++$entries_count % $entries_per_col == 0) {
                     $r->print('</font></td>');
                     if ($cols_output != 4) {
@@ -2394,11 +2396,11 @@ sub changewarning {
 '<script>function reinit(tf) { tf.submit();'.$postexec.' }</script>'."\n". 
 '<form name="reinitform" method="post" action="/adm/roles" target="loncapaclient">'.
 '<input type="hidden" name="orgurl" value="'.$url.
-'" /><input type="hidden" name="selectrole" value="1" /><h3><font color="red">'.
+'" /><input type="hidden" name="selectrole" value="1" /><h3><span class="LC_warning">'.
 &mt($message,' <input type="hidden" name="'.
     $env{'request.role'}.'" value="1" /><input type="button" value="'.
     &mt('re-initializing '.$course_type).'" onClick="reinit(this.form)" />').
-$help{'Caching'}.'</font></h3></form>'."\n\n");
+$help{'Caching'}.'</span></h3></form>'."\n\n");
 }
 
 # =========================================== Breadcrumbs for special functions
@@ -2492,8 +2494,8 @@ sub handler {
         $env{'form.folder'}=pop(@pagepath);
         $containertag = '<input type="hidden" name="pagepath" value="" />'.
 	    '<input type="hidden" name="pagesymb" value="" />';
-        $uploadtag = '<input type="hidden" name="pagepath" value="'.$env{'form.pagepath'}.'" />'.
-	    '<input type="hidden" name="pagesymb" value="'.$env{'form.pagesymb'}.'" />';
+        $uploadtag = '<input type="hidden" name="pagepath" value="'.&HTML::Entities::encode($env{'form.pagepath'},'<>&"').'" />'.
+	    '<input type="hidden" name="pagesymb" value="'.&HTML::Entities::encode($env{'form.pagesymb'},'<>&"').'" />';
     }
     if ($r->uri=~/^\/adm\/coursedocs\/showdoc\/(.*)$/) {
        $showdoc='/'.$1;
@@ -2675,36 +2677,42 @@ sub handler {
        }
        unless ($env{'form.pagepath'}) {
            $containertag = '<input type="hidden" name="folderpath" value="" />';
-           $uploadtag = '<input type="hidden" name="folderpath" value="'.$folderpath.'" />';
+           $uploadtag = '<input type="hidden" name="folderpath" value="'.&HTML::Entities::encode($folderpath,'<>&"').'" />';
        }
 
        $r->print(<<ENDCOURSEVERIFY);
 <form name="renameform" method="post" action="/adm/coursedocs">
-<input type="hidden" name="title" />
-<input type="hidden" name="cmd" />
-<input type="hidden" name="markcopy" />
-<input type="hidden" name="copyfolder" />
-$containertag
+  <input type="hidden" name="title" />
+  <input type="hidden" name="cmd" />
+  <input type="hidden" name="markcopy" />
+  <input type="hidden" name="copyfolder" />
+  $containertag
 </form>
 <form name="simpleedit" method="post" action="/adm/coursedocs">
-<input type="hidden" name="importdetail" value="" />
-$uploadtag
+  <input type="hidden" name="importdetail" value="" />
+  $uploadtag
 </form>
 <form action="/adm/coursedocs" method="post" name="courseverify">
-<table bgcolor="#AAAAAA" width="100%" cellspacing="4" cellpadding="4">
-<tr><td bgcolor="#DDDDCC">
-<input type="submit" name="verify" value="$lt{'vc'}" />$help{'Verify_Content'}
-</td><td bgcolor="#DDDDCC">
-    <input type="submit" name="versions" value="$lt{'cv'}" />$help{'Check_Resource_Versions'}
-$dumpbut
-$exportbut
-</td><td bgcolor="#DDDDCC">
-    <input type="submit" name="listsymbs" value="$lt{'ls'}" />
-</td><td bgcolor="#DDDDCC">
-    <input type="hidden" name="folder" value="$env{'form.folder'}" />
-    <input type="submit" name="docslog" value="$lt{'sl'}" />
-</td></tr></table>
+  <div class="LC_docs_course_commands">
+
+      <div>
+        <input type="submit" name="verify" value="$lt{'vc'}" />$help{'Verify_Content'}
+      </div>
+      <div>
+        <input type="submit" name="versions" value="$lt{'cv'}" />$help{'Check_Resource_Versions'}
+      </div>
+        $dumpbut
+        $exportbut
+      <div>
+        <input type="submit" name="listsymbs" value="$lt{'ls'}" />
+      </div>
+      <div>
+        <input type="hidden" name="folder" value="$env{'form.folder'}" />
+        <input type="submit" name="docslog" value="$lt{'sl'}" />
+      </div>
+  </div>
 </form>
+<div style="clear: both; height: 0px;">&nbsp;</div>
 ENDCOURSEVERIFY
        $r->print(&Apache::loncommon::help_open_topic('Docs_Adding_Course_Doc',
 		     &mt('Editing the Table of Contents for your '.$type)));
@@ -2757,17 +2765,17 @@ $lt{'title'}:<br />
 $uploadtag
 <input type="hidden" name="cmd" value="upload_default">
 <br />
-<nobr>
+<span class="LC_nobreak">
 <label>$lt{'parse'}?
 <input type="checkbox" name="parserflag" />
 </label>
-</nobr>
+</span>
 <br />
 <br />
-<nobr>
+<span class="LC_nobreak">
 <input type="submit" value="$lt{'upld'}">
  $help{'Uploading_From_Harddrive'}
-</nobr>
+</span>
 </form>
 </td>
 <td bgcolor="#DDDDDD">
@@ -2776,20 +2784,20 @@ $lt{'pubd'}<br />
 $uploadtag
 <input type=button onClick="javascript:groupsearch()" value="$lt{'srch'}" />
 <br />
-<nobr>
+<span class="LC_nobreak">
 <input type=button onClick="javascript:groupimport();" value="$lt{'impo'}" />
 $help{'Importing_LON-CAPA_Resource'}
-</nobr>
+</span>
 <br />
 <input type=button onClick="javascript:groupopen(0,1,1);" value="$lt{'book'}" />
 <p>
 <hr />
 $lt{'copm'}<br />
-<input type="text" size="40" name="importmap"><br />
-<nobr><input type=button 
+<input type="text" size="40" name="importmap" /><br />
+<span class="LC_nobreak"><input type=button 
 onClick="javascript:openbrowser('simpleeditdefault','importmap','sequence,page','')"
-value="$lt{'selm'}"> <input type="submit" name="loadmap" value="$lt{'load'}">
-$help{'Load_Map'}</nobr>
+value="$lt{'selm'}" /> <input type="submit" name="loadmap" value="$lt{'load'}" />
+$help{'Load_Map'}</span>
 </p>
 </form>
 <hr />
@@ -2803,124 +2811,124 @@ ENDFORM
 <form action="/adm/coursedocs" method="post" name="newext">
 $uploadtag
 <input type="hidden" name="importdetail" value="" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newext" type="button" onClick="javascript:makenewext('newext');"
 value="$lt{'extr'}" /> $help{'Adding_External_Resource'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/imsimportdocs" method="post" name="ims">
 <input type="hidden" name="folder" value="$folder" />
 <input name="imsimport" type="button" value="$lt{'imsf'}" onClick="javascript:makeims();" />
-</nobr>
 </form>
 ENDFORM
        }
        $r->print('</td><td bgcolor="#DDDDDD">');
        unless ($env{'form.pagepath'}) {
+	   my $path = &HTML::Entities::encode($env{'form.folderpath'},'<>&"');
            $r->print(<<ENDFORM);
 <br /><form action="/adm/coursedocs" method="post" name="newfolder">
-<input type="hidden" name="folderpath" value="$env{'form.folderpath'}" />
+<input type="hidden" name="folderpath" value="$path" />
 <input type="hidden" name="importdetail" value="" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newfolder" type="button"
 onClick="javascript:makenewfolder(this.form,'$folderseq');"
 value="$lt{'newf'}" />$help{'Adding_Folders'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="newpage">
-<input type="hidden" name="folderpath" value="$env{'form.folderpath'}" />
+<input type="hidden" name="folderpath" value="$path" />
 <input type="hidden" name="importdetail" value="" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newpage" type="button"
 onClick="javascript:makenewpage(this.form,'$pageseq');"
 value="$lt{'newp'}" />$help{'Adding_Pages'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="newsyl">
 $uploadtag
 <input type="hidden" name="importdetail" 
 value="Syllabus=/public/$coursedom/$coursenum/syllabus" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newsyl" type="submit" value="$lt{'syll'}" /> 
  $help{'Syllabus'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="newnav">
 $uploadtag
 <input type="hidden" name="importdetail" 
 value="Navigate Content=/adm/navmaps" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newnav" type="submit" value="$lt{'navc'}" />
 $help{'Navigate_Content'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="newsmppg">
 $uploadtag
 <input type="hidden" name="importdetail" value="" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newsmppg" type="button" value="$lt{'sipa'}"
 onClick="javascript:makesmppage();" /> $help{'Simple Page'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="newsmpproblem">
 $uploadtag
 <input type="hidden" name="importdetail" value="" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newsmpproblem" type="button" value="$lt{'sipr'}"
 onClick="javascript:makesmpproblem();" />$help{'Simple Problem'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="newdropbox">
 $uploadtag      
 <input type="hidden" name="importdetail" value="" />
-<nobr>          
+<span class="LC_nobreak">          
 <input name="newdropbox" type="button" value="$lt{'drbx'}"
 onClick="javascript:makedropbox();" />
-</nobr>         
+</span>         
 </form> 
 <br /><form action="/adm/coursedocs" method="post" name="newexamupload">
 $uploadtag
 <input type="hidden" name="importdetail" value="" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newexamupload" type="button" value="$lt{'scuf'}"
 onClick="javascript:makeexamupload();" />
 $help{'Score_Upload_Form'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="newbul">
 $uploadtag
 <input type="hidden" name="importdetail" value="" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newbulletin" type="button" value="$lt{'bull'}"
 onClick="javascript:makebulboard();" />
 $help{'Bulletin Board'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="newaboutme">
 $uploadtag
 <input type="hidden" name="importdetail" 
 value="$plainname=/adm/$udom/$uname/aboutme" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newaboutme" type="submit" value="$lt{'mypi'}" />
 $help{'My Personal Info'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="newaboutsomeone">
 $uploadtag
 <input type="hidden" name="importdetail" value="" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newaboutsomeone" type="button" value="$lt{'abou'}" 
 onClick="javascript:makeabout();" />
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="newgroupfiles">
 $uploadtag
 <input type="hidden" name="importdetail"
 value="Group Files=/adm/$coursedom/$coursenum/aboutme" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newgroupfiles" type="submit" value="$lt{'grpo'}" />
 $help{'Group Files'}
-</nobr>
+</span>
 </form>
 ENDFORM
        }
@@ -2929,19 +2937,19 @@ ENDFORM
 <form action="/adm/coursedocs" method="post" name="newsmpproblem">
 $uploadtag
 <input type="hidden" name="importdetail" value="" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newsmpproblem" type="button" value="$lt{'sipr'}"
 onClick="javascript:makesmpproblem();" />$help{'Simple Problem'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="newexamupload">
 $uploadtag
 <input type="hidden" name="importdetail" value="" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newexamupload" type="button" value="$lt{'scuf'}"
 onClick="javascript:makeexamupload();" />
 $help{'Score_Upload_Form'}
-</nobr>
+</span>
 </form>
 ENDBLOCK
        }
@@ -2965,11 +2973,12 @@ ENDBLOCK
        }
        &editor($r,$coursenum,$coursedom,$folder,$allowed);
        if ($allowed) {
-       my $folderseq=
-                  '/uploaded/'.$coursedom.'/'.$coursenum.'/supplemental_'.time.
-                     '.sequence';
+	   my $folderseq=
+	       '/uploaded/'.$coursedom.'/'.$coursenum.'/supplemental_'.time.
+	       '.sequence';
 
-          $r->print(<<ENDSUPFORM);
+	   my $path = &HTML::Entities::encode($env{'form.folderpath'},'<>&"');
+	   $r->print(<<ENDSUPFORM);
 <table cellspacing=4 cellpadding=4><tr>
 <th bgcolor="#DDDDDD">$lt{'upls'}</th>
 <th bgcolor="#DDDDDD">$lt{'spec'}</th>
@@ -2979,60 +2988,60 @@ ENDBLOCK
 <input type="file" name="uploaddoc" size="40">
 <br />
 <br />
-<nobr>
+<span class="LC_nobreak">
 <label>$lt{'parse'}?
 <input type="checkbox" name="parserflag" />
 </label>
-</nobr>
+</span>
 <br /><br />
 $lt{'comment'}:<br />
 <textarea cols=50 rows=4 name='comment'>
 </textarea>
 <br />
-<input type="hidden" name="folderpath" value="$env{'form.folderpath'}" />
+<input type="hidden" name="folderpath" value="$path" />
 <input type="hidden" name="cmd" value="upload_supplemental">
-<nobr>
+<span class="LC_nobreak">
 <input type="submit" value="$lt{'upld'}">
  $help{'Uploading_From_Harddrive'}
-</nobr>
+</span>
 </form>
 </td>
 <td bgcolor="#DDDDDD">
 <form action="/adm/coursedocs" method="post" name="supnewfolder">
-<input type="hidden" name="folderpath" value="$env{'form.folderpath'}" />
+<input type="hidden" name="folderpath" value="$path" />
 <input type="hidden" name="importdetail" value="" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newfolder" type="button"
 onClick="javascript:makenewfolder(this.form,'$folderseq');"
 value="$lt{'newf'}" /> $help{'Adding_Folders'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="supnewext">
-<input type="hidden" name="folderpath" value="$env{'form.folderpath'}" />
+<input type="hidden" name="folderpath" value="$path" />
 <input type="hidden" name="importdetail" value="" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newext" type="button" 
 onClick="javascript:makenewext('supnewext');"
 value="$lt{'extr'}" /> $help{'Adding_External_Resource'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="supnewsyl">
-<input type="hidden" name="folderpath" value="$env{'form.folderpath'}" />
+<input type="hidden" name="folderpath" value="$path" />
 <input type="hidden" name="importdetail" 
 value="Syllabus=/public/$coursedom/$coursenum/syllabus" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newsyl" type="submit" value="$lt{'syll'}" />
 $help{'Syllabus'}
-</nobr>
+</span>
 </form>
 <br /><form action="/adm/coursedocs" method="post" name="subnewaboutme">
-<input type="hidden" name="folderpath" value="$env{'form.folderpath'}" />
+<input type="hidden" name="folderpath" value="$path" />
 <input type="hidden" name="importdetail" 
 value="$plainname=/adm/$udom/$uname/aboutme" />
-<nobr>
+<span class="LC_nobreak">
 <input name="newaboutme" type="submit" value="$lt{'mypi'}" />
 $help{'My Personal Info'}
-</nobr>
+</span>
 </form>
 </td></tr>
 </table></td></tr>