X-Git-Url: https://git.harvie.cz/?a=blobdiff_plain;f=index.php;h=93c32ad5c66573742be5913efc541e84cb55cbd8;hb=7efdf72a861430b2e437e31278c6eacfd4d622a0;hp=6508a4d227068122180061b0127497130542c212;hpb=7bcd6b429b70cd0316fbac62b760af4ef706a25d;p=mirrors%2FSokoMan.git

diff --git a/index.php b/index.php
index 6508a4d..93c32ad 100755
--- a/index.php
+++ b/index.php
@@ -149,6 +149,8 @@ class Sklad_HTML extends HTML {
 		<li><a href="#">Assistants</a>
 			<menu>
 				<li><a href="$script/assistant/store">store</a></li>
+				<li><a href="$script/assistant/dispose">dispose</a></li>
+				<li><a href="$script/assistant/sell">sell</a></li>
 				<li>&darr;&darr; BETA &darr;&darr;</li>
 				<li><a href="$script/assistant/new-item">new-item</a></li>
 			</menu>
@@ -622,7 +624,11 @@ class Sklad_UI {
 		$location = $this->html->internal_url($location).'?message='.urlencode($message);
 		header('Location: '.$location);
 		if($error) trigger_error($message);
-		die("Location: <a href='$location'>$location</a>");
+		$location=htmlspecialchars($location);
+		die(
+			"<meta http-equiv='refresh' content='0; url=$location'>".
+			"Location: <a href='$location'>$location</a>"
+		);
 	}
 
 	function safe_include($dir,$name,$vars=array(),$ext='.inc.php') {