PHP attr_safe函数代码示例

    $newdirection = "asc";
} else {
    $newdirection = "desc";
}
echo "<td align='center'><b><a href='tlist.php?" . $tname . "tstart={$tstart}&order=member_count&direction={$newdirection}'>" . _("Total Members") . "</a></b></td>";
echo "<td align='center'><b>" . _("Options") . "</b></td>";
echo "</tr>\n";
if (!empty($tRows)) {
    $i = 0;
    while ($row = mysql_fetch_assoc($tResult)) {
        if ($i % 2 == 0) {
            echo "<tr bgcolor='" . $theme['color_mainbody_bg'] . "'>";
        } else {
            echo "<tr bgcolor='" . $theme['color_navbar_bg'] . "'>";
        }
        echo "<td align='center'><a href='tdetail.php?tid=" . $row['id'] . "'><img src='{$team_icons_url}/" . $row['icon'] . "' width='25' height='25' alt='" . attr_safe($row['teamname']) . "' border='0'></a></td>";
        echo "<td align='center'><b>" . $row['id'] . "</b></td>";
        echo "<td>" . $row['teamname'] . "</td>";
        echo "<td align='center'>" . $row['member_count'] . "</td>";
        echo "<td align='center'><b><a href='tdetail.php?tid=" . $row['id'] . "'>" . _("View") . "</a>&nbsp;";
        if ($userP['team_1'] != $row['id'] && $userP['team_2'] != $row['id'] && $userP['team_3'] != $row['id']) {
            echo "<a href='../members/jointeam.php?tid=" . $row['id'] . "'>" . _("Join") . "</a></b></td>";
        } else {
            echo "<a href='../members/quitteam.php?tid=" . $row['id'] . "'>" . _("Quit") . "</a></b></td>";
        }
        echo "</tr>\n";
        $i++;
    }
} else {
    echo "<tr bgcolor='" . $theme['color_mainbody_bg'] . "'><td colspan='6' align='center'><b>" . _("No more teams available.") . "</b></td></tr>\n";
}

<area shape="rect" coords="443,27,462,48" href="javascript:addChar('ps')" title="<?php 
echo attr_safe(_("psi"));
?>
">
<area shape="rect" coords="463,27,480,48" href="javascript:addChar('ô')" title="<?php 
echo attr_safe(_("omega"));
?>
">

<!-- Gamma exceptions -->
<area shape="rect" coords="488,27,511,48" href="javascript:addChar('ng')" title="<?php 
echo attr_safe(_("gamma") . " " . _("gamma"));
?>
">
<area shape="rect" coords="512,27,538,48" href="javascript:addChar('nk')" title="<?php 
echo attr_safe(_("gamma") . " " . _("kappa"));
?>
">
<area shape="rect" coords="539,27,564,48" href="javascript:addChar('nx')" title="<?php 
echo attr_safe(_("gamma") . " " . _("xi"));
?>
">
<area shape="rect" coords="565,27,594,48" href="javascript:addChar('nch')" title="<?php 
echo attr_safe(_("gamma") . " " . _("chi"));
?>
">

<area shape="default" nohref>
</map>
<?php 
// vim: sw=4 ts=4 expandtab

 // it was pulled in the raw format
 $word_suggestions = array();
 foreach ($suggestions as $suggestion) {
     list($time, $round, $page, $proofer, $words) = $suggestion;
     if (in_array($word, $words)) {
         array_push($word_suggestions, $suggestion);
     }
 }
 slim_header(_("Suggestion Detail"));
 $project_name = get_project_name($projectid);
 echo "<h2>", sprintf(_("Suggestion context for '%1\$s' in %2\$s"), $word, $project_name), "</h2>";
 echo_word_freq_style();
 echo "<p>";
 echo "<a href='show_word_context.php?projectid={$projectid}&amp;word={$encWord}' target='_PARENT'>" . _("Show full context set for this word") . "</a>";
 echo " | ";
 echo "<a target='_PARENT' href='" . attr_safe($_SERVER['PHP_SELF']) . "?projectid={$projectid}&amp;word={$encWord}&amp;timeCutoff={$timeCutoff}&amp;";
 if ($layout == LAYOUT_HORIZ) {
     echo "layout=" . LAYOUT_VERT . "'>" . _("Change to vertical layout");
 } else {
     echo "layout=" . LAYOUT_HORIZ . "'>" . _("Change to horizontal layout");
 }
 echo "</a>";
 echo "</p>";
 foreach ($word_suggestions as $suggestion) {
     list($time, $round, $page, $proofer, $words) = $suggestion;
     // get a context string
     list($context_strings, $totalLines) = _get_word_context_on_page($projectid, $page, $round, $word);
     # If the word was suggested on a page, but then changed before
     # being saved, let the PM know about it.
     if (!count($context_strings)) {
         echo "<p>" . sprintf(_('The word was suggested in round %1$s for page %2$s, but no longer exists in the saved text for that round.'), $round, $page) . "</p>";

function show_toggles_form($username, $user_settings)
{
    global $boolean_user_settings, $value_user_settings, $freeform_user_settings;
    echo "<form method='POST'>\n";
    echo "<input type='hidden' name='username' value='{$username}'>\n";
    echo "<input type='hidden' name='action' value='update'>\n";
    echo "<table>\n";
    echo "<tr>\n";
    echo "<th>" . _("Enable") . "</th>\n";
    echo "<th>" . _("Setting") . "</th>\n";
    echo "<th>" . _("Description") . "</th>\n";
    echo "</tr>\n";
    foreach ($boolean_user_settings as $setting_name => $setting_description) {
        $user_current_value = $user_settings->get_boolean($setting_name);
        $checked_attr = $user_current_value == 'yes' ? 'checked' : '';
        echo "<tr>\n";
        echo "<td><input name='{$setting_name}' type='checkbox' {$checked_attr}></td>\n";
        echo "<td>{$setting_name}</td>\n";
        echo "<td>{$setting_description}</td>\n";
        echo "</tr>\n";
    }
    foreach ($value_user_settings as $setting_name => $options) {
        echo "<tr>\n";
        echo "<td></td>";
        echo "<td>{$setting_name}</td>\n";
        echo "<td>";
        foreach ($options as $value => $label) {
            echo "<input type='radio' name='{$setting_name}' value='{$value}'";
            if ($user_settings->get_value($setting_name, '') == $value) {
                echo 'checked';
            }
            echo ">";
            if ($value) {
                echo " {$value}: {$label}<br>";
            } else {
                echo " {$label}<br>";
            }
        }
        echo "</td>";
        echo "</tr>\n";
    }
    foreach ($freeform_user_settings as $setting_name => $setting_description) {
        $user_current_value = $user_settings->get_value($setting_name);
        echo "<tr>";
        echo "<td></td>";
        echo "<td>{$setting_name}</td>\n";
        echo "<td>{$setting_description}<br>\n";
        echo "<input type='text' name='{$setting_name}' value='{$user_current_value}'>";
        echo "</td>";
        echo "</tr>";
    }
    echo "</table>\n";
    echo "<p><input type='submit' name='submit' value='" . attr_safe(_("Update")) . "'></p>\n";
    echo "</form>\n";
}

    echo "    curr_state = {$curr_state}\n";
    echo "    next_state = {$next_state}\n";
    echo "\n";
    echo "{$msg}\n";
    echo "</pre>\n";
    exit;
}
// -----------------------------------------------------------------------------
// If there's a question associated with this transition,
// and we haven't just asked it, ask it now.
if (!is_null($transition->confirmation_question) && $confirmed != 'yes') {
    echo "<p><b>" . _("Project ID") . ":</b> {$projectid}<br>\n";
    echo "<b>" . _("Title") . ":</b> {$project->nameofwork}<br>\n";
    echo "<b>" . _("Author") . ":</b> {$project->authorsname}</p>\n";
    echo $transition->confirmation_question;
    echo "<br>\n        <form action='changestate.php' method='POST'>\n        <input type='hidden' name='projectid'  value='{$projectid}'>\n        <input type='hidden' name='curr_state' value='{$curr_state}'>\n        <input type='hidden' name='next_state' value='{$next_state}'>\n        <input type='hidden' name='confirmed'  value='yes'>\n        <input type='hidden' name='return_uri' value='{$return_uri}'>" . sprintf(_("If so, %1\$s, otherwise go back to <a href='%2\$s'>where you were</a>"), "<input type='submit' value='" . attr_safe(_("confirm transition change")) . "'>", $return_uri) . "</form>";
    exit;
}
// At this point, we know that either there's no question associated
// with the transition, or there is and it has been answered yes.
if (!empty($transition->detour)) {
    // Detour (to collect data).
    $title = _("Transferring...");
    $body = "";
    $refresh_url = prepare_url($transition->detour);
    metarefresh(2, $refresh_url, $title, $body);
    exit;
}
$extras = array();
// -------------------------------------------------------------------------
$error_msg = $transition->do_state_change($project, $pguser, $extras);

    }
    echo "<select name='round_id'>";
    foreach ($expanded_rounds as $round) {
        echo "<option value='{$round}'";
        if ($round_id && $round == $round_id) {
            echo " selected";
        }
        echo ">{$round}</option>\n";
    }
    echo "</select>";
    if (!$project) {
        echo " " . _("(optional)");
    }
    echo " &nbsp; &nbsp;<input type='submit' value='" . attr_safe(_("View")) . "'>";
    if ($project) {
        echo " &nbsp; <input type='submit' name='reset' value='" . attr_safe(_("Reset")) . "'>";
    }
    echo "</form>";
    exit;
} elseif ($frame == "image") {
    slim_header(_("Image Frame"));
    if (!count($error_messages)) {
        $percent = get_integer_param($_GET, 'percent', 100, 1, 999);
        $width = 10 * $percent;
        ?>
<form method="get" action="view_page_text_image.php">
<input type="hidden" name="projectid" value="<?php 
        echo $projectid;
        ?>
">
<input type="hidden" name="page" value="<?php 

    echo sprintf(_("For assistance, please contact <a href='%s'>%s</a>."), $mailto_url, $general_help_email_addr);
    echo "\n";
    echo sprintf(_("Please include the account activation code %s in your email for assistance."), $ID);
    echo "</p>\n";
    exit;
}
// Delete record in non_activated_users.
mysql_query("DELETE FROM non_activated_users WHERE id='{$ID}'");
// Insert into 'real' table -- users
$query = sprintf("INSERT INTO users (id, real_name, username, email, manager, date_created, email_updates, u_plist, u_top10, u_neigh, u_intlang) VALUES ('%s', '%s', '%s', '%s', 'no', {$date_created}, {$email_updates}, 3, 1, 10, '%s')", mysql_real_escape_string($ID), mysql_real_escape_string($real_name), mysql_real_escape_string($username), mysql_real_escape_string($email), mysql_real_escape_string($u_intlang));
$result = mysql_query($query) or die(mysql_error());
$u_id = mysql_insert_id($db_Connection->db_lk);
// auto-incremented users.u_id
// create profile
$profileString = "INSERT INTO user_profiles SET u_ref={$u_id}";
$makeProfile = mysql_query($profileString);
$profile_id = mysql_insert_id($db_Connection->db_lk);
// auto-incremented user_profiles.id
// add ref to profile
$refString = sprintf("UPDATE users SET u_profile={$profile_id} WHERE id='%s' AND username='%s'", mysql_real_escape_string($ID), mysql_real_escape_string($username));
$makeRef = mysql_query($refString);
// Send them an introduction e-mail
maybe_welcome_mail($email, $real_name, $username);
printf(_("User %s activated successfully."), $username);
echo " ";
// TRANSLATORS: %s is the site name
printf(_("Please check the e-mail being sent to you for further information about %s."), $site_name);
echo "<center>";
echo "<br><font size=+1>" . _("Enter your password below to sign in and start proofreading!!");
echo "<form action='login.php' method='post'>\n<input type='hidden' name='userNM' value='" . attr_safe($username) . "'>\n<input type='password' name='userPW'>\n<input type='submit' value='" . attr_safe(_("Sign In")) . "'></form>";
// vim: sw=4 ts=4 expandtab

<tr><td align="right">
<label for='is_regex'><?php 
echo _("Regular Expression?");
?>
</label>
</td><td>
<input type="checkbox" name="is_regex" id='is_regex' checked disabled />
</td></tr>
</table>
<center>
    <input type="button" value="<?php 
echo attr_safe(_("Replace all."));
?>
" onClick="do_replace()">
    <input type="button" id='undo' value="<?php 
echo attr_safe(_("Undo."));
?>
" onClick="restore_saved_text()" disabled />
</center>
</form>
<p><?php 
echo _("Warning: Undo is only possible for the most recent replace!");
?>
</p>
<p id='regex_help_title' onclick='toggle_regex_help();'><span id='regex_arrow'>&#9654;</span>
<?php 
echo _('Regular Expression?');
?>
</p>
<p id='regex_help'><?php 
// TRANSLATORS: Description of the . character in a regualar expression

        }
    } else {
        $bgcolor = "#FF0000";
        if ($show_image_size) {
            $imagesize = 0;
        }
    }
    echo "<td bgcolor='{$bgcolor}'><a href=../project_manager/displayimage.php?project={$projectid}&imagefile={$image}>{$image}</a></td>\n";
    // Original Page Number
    echo "<td bgcolor='{$bgcolor}'><input type ='textbox' name='orig_page_num_[{$image}]' value = {$orig_page_num}></td>";
    // Set up existing page metadata if there is any, page defaults to nonblank
    $metadata_possibles = array('illustration' => _("Illustration"), 'blank' => _("Blank"), 'missing' => _("Page Missing After This One"), 'badscan' => _("Bad Scan"), 'sequence' => _("Page Out of Sequence"), 'nonblank' => _("Non-Blank"));
    if (!array_key_exists($metadata, $metadata_possibles)) {
        // e.g., $metadata == ''
        $metadata = 'nonblank';
    }
    echo "<td bgcolor='{$bgcolor}' align='left'>\n";
    foreach ($metadata_possibles as $code => $label) {
        $checked = $code == $metadata ? 'checked' : '';
        echo "<input type='radio' name='metadata_[{$image}]' value='{$code}' {$checked}>{$label}<br>\n";
    }
    echo "</td>";
    // Show Thumbnail
    echo "<td bgcolor='{$bgcolor}' align='right'>\n                <a href=\"../project_manager/displayimage.php?project={$projectid}&imagefile={$image}\"><img src =\"{$projects_url}/{$projectid}/thumbs/{$image}\" alt = \"{$image}\" border =\"0\"></a>\n            </td>";
    echo "</tr>";
}
echo "</table>";
echo "<INPUT TYPE=SUBMIT VALUE=\"" . attr_safe(_("Save and Continue Working")) . "\" NAME =\"continue\">\n        <INPUT TYPE=SUBMIT VALUE=\"" . attr_safe(_("Save as Done")) . "\" NAME =\"done\">\n        <INPUT TYPE=SUBMIT VALUE=\"" . attr_safe(_("Leave As-Is and Quit")) . "\" NAME =\"return\">";
echo "</form></center>";
echo "<br>";
// vim: sw=4 ts=4 expandtab

function TaskForm($task)
{
    global $requester_u_id, $tasks_array, $severity_array, $categories_array, $tasks_status_array;
    global $os_array, $browser_array, $versions_array, $percent_complete_array;
    global $task_assignees_array;
    global $priority_array, $tasks_url;
    // Non-managers can only set the task status to New.
    if (!user_is_a_sitemanager() && !user_is_taskcenter_mgr()) {
        $tasks_status_array = array(1 => "New");
    }
    $task_summary_enc = attr_safe($task->task_summary);
    $task_details_enc = html_safe($task->task_details);
    echo "<form action='{$tasks_url}' method='post'>";
    if (empty($task->task_id)) {
        echo "<input type='hidden' name='action' value='create'>\n";
    } else {
        echo "<input type='hidden' name='action' value='edit'>\n";
        echo "<input type='hidden' name='task_id' value='{$task->task_id}'>";
    }
    echo "<table class='tasks'>\n";
    echo "<tr>";
    echo "<td colspan='2'>";
    echo "<b>" . property_get_label('task_summary', FALSE) . "&nbsp;</b>";
    echo "&nbsp;&nbsp;";
    echo "<input type='text' name='task_summary' value=\"{$task_summary_enc}\" size='60' maxlength='80' class='taskinp1'>";
    echo "</td>";
    echo "</tr>\n";
    echo "<tr><td width='50%'><table class='taskplain'>\n";
    property_echo_select_tr('task_type', $task->task_type, $tasks_array);
    property_echo_select_tr('task_category', $task->task_category, $categories_array);
    property_echo_select_tr('task_status', $task->task_status, $tasks_status_array);
    property_echo_select_tr('task_assignee', $task->task_assignee, $task_assignees_array);
    property_echo_select_tr('task_os', $task->task_os, $os_array);
    echo "</table></td><td width='50%'><table class='taskplain'>\n";
    property_echo_select_tr('task_browser', $task->task_browser, $browser_array);
    property_echo_select_tr('task_severity', $task->task_severity, $severity_array);
    property_echo_select_tr('task_priority', $task->task_priority, $priority_array);
    property_echo_select_tr('task_version', $task->task_version, $versions_array);
    if ((user_is_a_sitemanager() || user_is_taskcenter_mgr()) && !empty($task->task_id)) {
        property_echo_select_tr('percent_complete', $task->percent_complete, $percent_complete_array);
    } elseif ($task->opened_by == $requester_u_id && !user_is_a_sitemanager() && !user_is_taskcenter_mgr()) {
        echo "<input type='hidden' name='percent_complete' value='{$task->percent_complete}'>";
    }
    echo "</table></td></tr><tr><td>\n";
    echo "<table class='taskplain'><tr><td width='5%'><b>Details</b>&nbsp;&nbsp;</td>\n";
    echo "<td width='95%'>";
    echo "<textarea name='task_details' cols='60' rows='5'>{$task_details_enc}</textarea>";
    echo "</td>";
    echo "</tr>";
    echo "</table>\n";
    echo "</td></tr><tr><td colspan='2'><center>\n";
    echo "<input type='submit' value='";
    if (empty($task->task_id)) {
        echo "Add Task";
    } else {
        echo "Submit Edit";
    }
    echo "' class='taskinp2'>\n";
    echo "</center></td></tr></table></form><br />\n";
}

 function show_edit_form()
 {
     global $page_url;
     echo "<table class='source'><form method='post' action='{$page_url}'>";
     echo "<input type='hidden' name='action' value='update_oneshot'>\n";
     if ($this->new_source) {
         $this->_show_edit_row('spec_code', _('Special Day ID'), false, 20);
     } else {
         echo "<input type='hidden' name='editing' value='true' />" . "<input type='hidden' name='spec_code' value='" . attr_safe($this->spec_code) . "' />";
         $this->_show_summary_row(_('Special Day ID'), $this->spec_code);
     }
     $this->_show_edit_row('display_name', _('Display Name'), false, 80);
     echo "  <tr><td class='pa'>Enable</th><td><input type='checkbox' name='enable'";
     if ($this->enable == 1) {
         echo " value='1' checked";
     }
     echo "></td></tr>\n";
     $this->_show_edit_row('comment', _('Comment'), true);
     $this->_show_edit_row('color', _('Color'), false, 8);
     $this->_show_edit_row('open_month', _('Open Month'), false, 2);
     $this->_show_edit_row('open_day', _('Open Day'), false, 2);
     $this->_show_edit_row('close_month', _('Close Month'), false, 2);
     $this->_show_edit_row('close_day', _('Close Day'), false, 2);
     $this->_show_edit_row('date_changes', _('Date Changes'), false);
     $this->_show_edit_row('info_url', _('Info URL'), false);
     $this->_show_edit_row('image_url', _('Image URL'), false);
     echo "<tr><td colspan='2' style='text-align:center;'>\n            <input type='submit' name='save_edits' value='" . attr_safe(_('Save')) . "' />\n            </td> </tr> </form> </table>\n\n";
 }

 function show_edit_form()
 {
     global $page_url;
     echo "<table class='source'><form method='post'\n            action='{$page_url}&amp;action=update_oneshot#{$this->code_name}'>\n";
     if ($this->new_source) {
         $this->_show_edit_row('code_name', _('Image Source ID'), false, 10);
     } else {
         echo "<input type='hidden' name='editing' value='true' />" . "<input type='hidden' name='code_name' value='" . attr_safe($this->code_name) . "' />";
         $this->_show_summary_row(_('Image Source ID'), $this->code_name);
     }
     $this->_show_edit_row('display_name', _('Display Name'), false, 30);
     $this->_show_edit_row('full_name', _('Full Name'));
     $this->_show_edit_row('url', _('Website'));
     $this->_show_edit_row('credit', _('Credits Line'), true);
     $this->_show_edit_permissions_row();
     $this->_show_edit_row('public_comment', _('Description (public comments)'), true);
     $this->_show_edit_row('internal_comment', _('Notes (internal comments)'), true);
     echo "<tr><td colspan='2' class='center'>\n            <input type='submit' name='save_edits' value='" . attr_safe(_('Save')) . "' />\n            </td> </tr> </form> </table>\n\n";
 }

    echo "<p>{$big_upload_blurb}</p>\n";
    echo "</li>\n";
    if ($stage != 'smooth_done') {
        echo "<li>";
        if ($stage != 'smooth_avail') {
            echo _("(optional) Leave comments for the next person who checks out this project:");
        } else {
            echo _("Leave instructions for smooth readers:");
        }
        echo "<br>\n";
        echo "<textarea style='margin-bottom: 1em;' name='postcomments' cols='75' rows='10'></textarea>\n";
        echo "</li>\n";
    }
    echo "<li>";
    // TRANSLATORS: %1$s is replaced with a form <input> containing separately translated text like 'Upload file'
    echo sprintf(_('%1$s or return to the <a href="%2$s">%3$s</a>.'), sprintf('<input type="submit" value="%s">', attr_safe($submit_button)), $back_url, $back_blurb);
    echo "<p>" . sprintf($submit_blurb, $submit_button) . "</p>";
    echo "</li>\n";
    echo "</ol>";
    echo "</form>\n";
} else {
    // Handle a submission from the upload page.
    // if files have been uploaded, process them
    // mangle the postcomments
    // make reasonably sure script does not timeout on large file uploads
    set_time_limit(14400);
    $path_to_file = "{$projects_dir}/{$projectid}";
    $files = $_FILES['files'];
    // do some checks. File must exist (except if we are returning to PP
    // or PPV available.
    // if we have a file, we need its name to end in .zip, and we need

function display_hiddens($projectid_, $from_image_, $page_name_handling, $transfer_notifications, $add_deletion_reason, $merge_wordcheck_files)
{
    echo "\n<input type='hidden' name='from_image_[lo]'        value='" . attr_safe($from_image_['lo']) . "'>";
    echo "\n<input type='hidden' name='from_image_[hi]'        value='" . attr_safe($from_image_['hi']) . "'>";
    echo "\n<input type='hidden' name='projectid_[from]'       value='" . attr_safe($projectid_['from']) . "'>";
    echo "\n<input type='hidden' name='projectid_[to]'         value='" . attr_safe($projectid_['to']) . "'>";
    echo "\n<input type='hidden' name='page_name_handling'     value='" . attr_safe($page_name_handling) . "'>";
    echo "\n<input type='hidden' name='transfer_notifications' value='" . attr_safe($transfer_notifications) . "'>";
    echo "\n<input type='hidden' name='add_deletion_reason'    value='" . attr_safe($add_deletion_reason) . "'>";
    echo "\n<input type='hidden' name='merge_wordcheck_files'  value='" . attr_safe($merge_wordcheck_files) . "'>";
}

function do_navigation($projectid, $image, $L_round_num, $R_round_num, $L_user_column_name, $L_user)
{
    global $navigation_text;
    $jump_to_js = "this.form.image.value=this.form.jumpto[this.form.jumpto.selectedIndex].value; this.form.submit();";
    $navigation_text .= "\n<form method='get' action='diff.php'>";
    $navigation_text .= "\n<input type='hidden' name='project' value='{$projectid}'>";
    $navigation_text .= "\n<input type='hidden' name='image' value='{$image}'>";
    $navigation_text .= "\n<input type='hidden' name='L_round_num' value='{$L_round_num}'>";
    $navigation_text .= "\n<input type='hidden' name='R_round_num' value='{$R_round_num}'>";
    $navigation_text .= "\n" . _("Jump to") . ": <select name='jumpto' onChange='{$jump_to_js}'>\n";
    $query = "SELECT image, {$L_user_column_name}  FROM {$projectid} ORDER BY image ASC";
    $res = mysql_query($query) or die(mysql_error());
    $prev_image = "";
    $next_image = "";
    $prev_from_proofer = "";
    $next_from_proofer = "";
    $got_there = FALSE;
    $got_to_next = FALSE;
    // construct the dropdown; work out where previous and next buttons should take us
    while (list($this_val, $this_user) = mysql_fetch_row($res)) {
        $navigation_text .= "\n<option value='{$this_val}'";
        if ($this_val == $image) {
            $navigation_text .= " selected";
            // make the correct element of the drop down selected
            $got_there = TRUE;
        } else {
            if ($got_there && !$got_to_next) {
                // we are at the one after the current one
                $got_to_next = TRUE;
                $next_image = $this_val;
            }
        }
        if ($got_to_next && $next_from_proofer == "" && $this_user == $L_user) {
            $next_from_proofer = $this_val;
        }
        if (!$got_there) {
            $prev_image = $this_val;
            // keep track of what the previous image was
            if ($this_user == $L_user) {
                $prev_from_proofer = $this_val;
            }
        }
        $navigation_text .= ">{$this_val}</option>";
    }
    $navigation_text .= "\n</select>";
    $previous_js = "this.form.image.value='{$prev_image}'; this.form.submit();";
    $next_js = "this.form.image.value='{$next_image}'; this.form.submit();";
    $previous_from_proofer_js = "this.form.image.value='{$prev_from_proofer}'; this.form.submit();";
    $next_from_proofer_js = "this.form.image.value='{$next_from_proofer}'; this.form.submit();";
    $navigation_text .= "\n<input type='button' value='" . attr_safe(_("Previous")) . "' onClick=\"{$previous_js}\"";
    if ($prev_image == "") {
        $navigation_text .= " disabled";
    }
    $navigation_text .= ">";
    $navigation_text .= "\n<input type='button' value='" . attr_safe(_("Next")) . "' onClick=\"{$next_js}\"";
    if ($next_image == "") {
        $navigation_text .= " disabled";
    }
    $navigation_text .= ">";
    if (can_navigate_by_proofer($projectid, $L_user)) {
        $navigation_text .= "\n<input type='button' value='" . attr_safe(_("Proofreader previous")) . "' onClick=\"{$previous_from_proofer_js}\"";
        if ($prev_from_proofer == "") {
            $navigation_text .= " disabled";
        }
        $navigation_text .= ">";
        $navigation_text .= "\n<input type='button' value='" . attr_safe(_("Proofreader next")) . "' onClick=\"{$next_from_proofer_js}\"";
        if ($next_from_proofer == "") {
            $navigation_text .= " disabled";
        }
        $navigation_text .= ">";
    }
    $navigation_text .= "\n</form>\n";
}