From c5fcc39d7f487028cb38296e5fcec9c9832a1e64 Mon Sep 17 00:00:00 2001
From: real_nowhereman <real_nowhereman@aa359531-4221-0410-9edc-b0b45c38dadb>
Date: Thu, 21 Oct 2010 09:03:50 +0000
Subject: [PATCH] prevent injections

---
 admin/panels/entry/admin.entry.commentlist.tpl | 10 +---------
 1 file changed, 1 insertion(+), 9 deletions(-)

diff --git a/admin/panels/entry/admin.entry.commentlist.tpl b/admin/panels/entry/admin.entry.commentlist.tpl
index eb63c98..ed1a346 100755
--- a/admin/panels/entry/admin.entry.commentlist.tpl
+++ b/admin/panels/entry/admin.entry.commentlist.tpl
@@ -13,13 +13,6 @@
 
 {html_form}
 
-<script type="text/javascript">
-{literal}
-
-function admin_entry_comment_delete() { return confirm({/literal}'{$plang.act_del_confirm}'{literal}); }
-
-{/literal}
-</script>
 <table class="entrylist">
 <thead><tr>
 <th>{$panelstrings.date}</th>
@@ -45,8 +38,7 @@ function admin_entry_comment_delete() { return confirm({/literal}'{$plang.act_de
 href="{"`$panel_url`&entry=`$entryid`"|action_link:commedit|cmd_link:comment:$id}">
 {$plang.act_edit}
 </a>
-<a class="link-delete" onclick="return admin_entry_comment_delete();"
-href="{"`$action_url`&entry=`$entryid`"|cmd_link:delete:$id}">
+<a class="link-delete" href="{"`$panel_url`&entry=`$entryid`"|action_link:commdelete|cmd_link:comment:$id}">
 {$plang.act_del}
 </a>
 </td>