X-Git-Url: https://disinclined.org/git/?a=blobdiff_plain;f=index.php;h=8cb1d62e4db4d149033f1e520d63d5f8ffbf8cfa;hb=61419ce10ec920aae29537f9bc0f8295d94baddf;hp=88f82d2410f52e0f59fdfbe72e9142e53265b75d;hpb=bb1eebf30f1917d091f84a9bd43b97a5e3fcf574;p=dylansserver.git

diff --git a/index.php b/index.php
index 88f82d2..8cb1d62 100644
--- a/index.php
+++ b/index.php
@@ -163,7 +163,7 @@ class index extends cms {
         </li>
 
         <li><a href=
-        "git">git://dylansserver.com</a></li>
+        "/git/">git://dylansserver.com</a></li>
 
         <li>
           <h3>some notes:</h3>
@@ -172,6 +172,13 @@ class index extends cms {
         <li><a href=
         "/notes/">here</a> [<a href="/notes/rss">rss</a>]</li>
 
+        <li>
+          <h3>my resume:</h3>
+        </li>
+
+        <li>[<a href=
+        "/resume">pdf</a>]</li>
+
         <li>
         </li>
 OTHER_PROJECTS;
@@ -187,7 +194,7 @@ OTHER_PROJECTS;
 
   protected function display_exhibits() {
     echo "<div id='exhibit'>";
-    $sql = "SELECT text FROM projects";
+    $sql = "SELECT text FROM projects ORDER BY rank";
     $result = $this->db->query($sql);
     while ($entry = $result->fetch_object()) {
       echo $entry->text;
@@ -201,7 +208,7 @@ OTHER_PROJECTS;
           <h3>my projects:</h3>
         </li>
 HEREDOC;
-    $sql = "SELECT title FROM projects";
+    $sql = "SELECT title FROM projects ORDER BY rank";
     $result = $this->db->query($sql);
     while ($entry = $result->fetch_object()) {
       echo "<li><a class='tab' href='$entry->title'>$entry->title</a></li>";
@@ -435,8 +442,8 @@ class note extends cms {
       // and a default author needs to be set
       // for no-javascript users.
       $stmt->bind_param('sss',
-                          htmlspecialchars($_POST['name']),
-                          htmlspecialchars($_POST['text']),
+                          $_POST['name'],
+                          $_POST['text'],
                         $this->id);
       $stmt->execute();
     }
@@ -491,7 +498,7 @@ END_OF_NAVIGATION;
       $date_posted = $entry['date_posted'];
       $author = $entry['author'];
       $text = htmlspecialchars($entry['text']);
-      $head = "<h3>$author</h3>";
+      $head = "<h3>" . htmlspecialchars($author) . "</h3>";
       echo <<<END_OF_COMMENT
       <div class='comment'>
       $head