6 files changed, 20 insertions, 15 deletions
diff --git a/data/templates/default/about.tpl.php b/data/templates/default/about.tpl.php
index 8a9b206..bd9348c 100644
--- a/data/templates/default/about.tpl.php
+++ b/data/templates/default/about.tpl.php
@@ -12,12 +12,12 @@ $this->includeTemplate($GLOBALS['top_include']);
 <h3><?php echo T_('Geek Stuff'); ?></h3>
 <ul>
 <li><a href="http://sourceforge.net/projects/semanticscuttle/">Semantic Scuttle</a> <?php echo T_('is licensed under the ');?> <a href="http://www.gnu.org/copyleft/gpl.html"><acronym title="GNU\'s Not Unix">GNU</acronym> General Public License</a> (<?php echo T_('you can freely host it on your own web server.'); ?>)</li>
-<li><?php echo sprintf(T_('%1$s supports most of the <a href="http://del.icio.us/doc/api">del.icio.us <abbr title="Application Programming Interface">API</abbr></a>. Almost all of the neat tools made for that system can be modified to work with %1$s instead. If you find a tool that won\'t let you change the API address, ask the creator to add this setting. You never know, they might just do it.'), $GLOBALS['sitename']); ?></li>
+<li><?php echo sprintf(T_('%1$s supports most of the <a href="http://www.delicious.com/help/api">del.icio.us <abbr title="Application Programming Interface">API</abbr></a>. Almost all of the neat tools made for that system can be modified to work with %1$s instead. If you find a tool that won\'t let you change the API address, ask the creator to add this setting. You never know, they might just do it.'), $GLOBALS['sitename']); ?></li>
 
 
 
 <?php if(!is_null($currentUser) && $currentUser->isAdmin()): ?>
-<li>SemanticScuttle v0.98.0</li>
+<li>SemanticScuttle v0.98.3</li>
 <?php endif ?>
 </ul>
 
diff --git a/data/templates/default/bookmarks.tpl.php b/data/templates/default/bookmarks.tpl.php
index 0ed9c1d..2a3d169 100644
--- a/data/templates/default/bookmarks.tpl.php
+++ b/data/templates/default/bookmarks.tpl.php
@@ -39,9 +39,9 @@ include('search.menu.php');
 
 <?php if($GLOBALS['enableAdminColors']!=false && isset($userid) && $userservice->isAdmin($userid) && $pageName != PAGE_WATCHLIST) : ?>
 <div style="width:70%;text-align:center;">
- <img src="<?php $theme->resource('images/logo_24.gif'); ?>" width="12px"/>
+ <img src="<?php echo $theme->resource('images/logo_24.gif'); ?>" width="12px"/>
  <?php echo T_('Bookmarks on this page are managed by an admin user.'); ?>
- <img src="<?php $theme->resource('images/logo_24.gif'); ?>" width="12px"/>
+ <img src="<?php echo $theme->resource('images/logo_24.gif'); ?>" width="12px"/>
 </div>
 <?php endif?>
 
@@ -107,7 +107,7 @@ if($userservice->isLoggedOn()) {
 }
 ?>
 
-<?php if (count($bookmarks) > 0) { ?>
+<?php if (isset($bookmarks) && count($bookmarks) > 0) { ?>
 <script type="text/javascript">
 window.onload = playerLoad;
 </script>
@@ -358,7 +358,7 @@ if ($currenttag!= '') {
 			$rel = ' rel="nofollow"';
 		}
 
-		$address  = filter($row['bAddress']);
+		$address  = $row['bAddress'];
 		$oaddress = $address;
 		// Redirection option
 		if ($GLOBALS['useredir']) {
@@ -418,7 +418,7 @@ if ($currenttag!= '') {
 
 		}
 		echo '   <div class="description">'. nl2br($bkDescription) ."</div>\n";
-        echo '   <div class="address">' . shortenString($oaddress) . "</div>\n";
+        echo '   <div class="address">' . htmlspecialchars(shortenString($oaddress)) . "</div>\n";
 
 		echo '   <div class="meta">'
             . $cats . "\n"
diff --git a/data/templates/default/sidebar.block.linked.php b/data/templates/default/sidebar.block.linked.php
index 9aa3cc0..d3a25a5 100644
--- a/data/templates/default/sidebar.block.linked.php
+++ b/data/templates/default/sidebar.block.linked.php
@@ -14,7 +14,7 @@ require_once('sidebar.linkedtags.inc.php');
 /* Manage input */
 $user = isset($user)?$user:'';
 $userid = isset($userid)?$userid:0;
-$currenttag = isset($currenttag)?$currenttag:'';
+$currenttag = isset($currenttag) ? str_replace('+', ',', $currenttag) : '';
 //$summarizeLinkedTags = isset($summarizeLinkedTags)?$summarizeLinkedTags:false;
 
 $logged_on_userid = $userservice->getCurrentUserId();
diff --git a/data/templates/default/sidebar.tpl.php b/data/templates/default/sidebar.tpl.php
index e823af5..b4fac96 100644
--- a/data/templates/default/sidebar.tpl.php
+++ b/data/templates/default/sidebar.tpl.php
@@ -1,4 +1,6 @@
-<?php if($GLOBALS['enableAdminColors']!=false && isset($userid) && $userservice->isAdmin($userid)): ?>
+<?php if ($GLOBALS['enableAdminColors'] != false
+    && isset($userid) && $userservice->isAdmin($userid)
+): ?>
 <div id="sidebar" class="adminBackground">
 <?php else: ?>
 <div id="sidebar">
@@ -8,9 +10,11 @@
 <?php
 echo $GLOBALS['sidebarTopMessage'].' ';
 
-$size = count($sidebar_blocks);
-for ($i = 0; $i < $size; $i++) {
-	$this->includeTemplate('sidebar.block.'. $sidebar_blocks[$i]);
+if (isset($sidebar_blocks) && count($sidebar_blocks)) {
+    $size = count($sidebar_blocks);
+    for ($i = 0; $i < $size; $i++) {
+        $this->includeTemplate('sidebar.block.'. $sidebar_blocks[$i]);
+    }
 }
 
 echo $GLOBALS['sidebarBottomMessage'];
diff --git a/data/templates/default/tagrename.tpl.php b/data/templates/default/tagrename.tpl.php
index 894b964..e3d0467 100644
--- a/data/templates/default/tagrename.tpl.php
+++ b/data/templates/default/tagrename.tpl.php
@@ -28,7 +28,6 @@ window.onload = function() {
 </tr>
 
 </table>
-</p>
 
 <?php if (isset($referrer)): ?>
 <div><input type="hidden" name="referrer" value="<?php echo $referrer; ?>" /></div>
diff --git a/data/templates/default/top.inc.php b/data/templates/default/top.inc.php
index 17ec982..240e5b2 100644
--- a/data/templates/default/top.inc.php
+++ b/data/templates/default/top.inc.php
@@ -48,8 +48,10 @@ if(!isset($_GET['popup'])) {
 ?></div>
 
 <?php
-if (isset($subtitle)) {
-	echo '<h2>'. $subtitle ."</h2>\n";
+if (isset($subtitlehtml)) {
+	echo '<h2>' . $subtitlehtml . "</h2>\n";
+} else if (isset($subtitle)) {
+      echo '<h2>' . htmlspecialchars($subtitle) . "</h2>\n";
 }
 if(DEBUG_MODE) {
 	echo '<p class="error">'. T_('Admins, your installation is in "Debug Mode" ($debugMode = true). To go in "Normal Mode" and hide debugging messages, change $debugMode to false into config.php.') ."</p>\n";