From 1f032a1d4353957b7b8e63a82897d5f0ca82d8a8 Mon Sep 17 00:00:00 2001
From: Mario Fetka <mario.fetka@gmail.com>
Date: Thu, 21 May 2026 17:32:39 +0200
Subject: [PATCH] Header/Footer + HTML-Escaping + Delete-Confirm

---
 settings.pl | 29 ++++++++++++++++++++++++-----
 1 file changed, 24 insertions(+), 5 deletions(-)

diff --git a/settings.pl b/settings.pl
index 63977a9..7eedbdd 100644
--- a/settings.pl
+++ b/settings.pl
@@ -34,6 +34,25 @@ sub html_escape( $ )
 	return $s;
 }
 
+
+sub settings_nav_bar()
+{
+	return <<'EOF_NAV';
+<div class="settings-nav" style="position:sticky;top:0;z-index:20;margin:-14px -14px 14px -14px;padding:10px 14px;background:#f6f2ea;border-bottom:1px solid #ddcfba;box-shadow:0 4px 12px rgba(80,55,30,0.06);">
+  <a class="settings-nav-back" style="display:inline-block;margin-right:10px;padding:7px 12px;border-radius:9px;background:#6d5d53;color:#fff;text-decoration:none;font-weight:bold;" href="javascript:history.back()">Back</a>
+  <a class="settings-nav-main" style="display:inline-block;padding:7px 12px;border-radius:9px;background:#a32020;color:#fff;text-decoration:none;font-weight:bold;" href="/" target="_top">Main menu</a>
+</div>
+EOF_NAV
+}
+
+sub delete_confirm_attr( $ )
+{
+	my $what = html_escape( $_[0] );
+	return ' onclick="return confirm(\'Delete ' . $what . '?\')"';
+}
+
+$settings_nav_bar = settings_nav_bar();
+
 sub kernel_network_interfaces()
 {
 	my %interfaces = ();
@@ -1203,7 +1222,7 @@ EOF
 			<A HREF="/settings/volumes/$c[1]"><TT>$c[1]</TT></A> (<TT>$c[2]</TT>)	<!-- NETSCAPE RRRAAARRR -->
 		</TD>
 		<TD ALIGN=RIGHT>
-			<A HREF="/apply/volumes/$c[1]">Delete</A><BR>
+			<A HREF="/apply/volumes/$c[1]" onclick="return confirm('Delete volume $c[1]?')">Delete</A><BR>
 		</TD>
 	</TR>
 EOF
@@ -1504,7 +1523,7 @@ EOF
 			<A HREF="/settings/devices/$c[1]"><TT>$c[1]</TT></A> ($c[2]/$c[3])
 		</TD>
 		<TD ALIGN=RIGHT>
-			<A HREF="/apply/devices/$c[1]">Delete</A><BR>
+			<A HREF="/apply/devices/$c[1]" onclick="return confirm('Delete device $c[1]?')">Delete</A><BR>
 		</TD>
 	</TR>
 EOF
@@ -1819,7 +1838,7 @@ EOF
 			<A HREF="/settings/users/$c[0]">$c[0]</A>
 		</TD>
 		<TD ALIGN=RIGHT>
-			<A HREF="/apply/users/$c[0]">Delete</A><BR>
+			<A HREF="/apply/users/$c[0]" onclick="return confirm('Delete user $c[0]?')">Delete</A><BR>
 		</TD>
 	</TR>
 EOF
@@ -2059,7 +2078,7 @@ EOF
 			<A HREF="/settings/groups/$c[0]">$c[0]</A>
 		</TD>
 		<TD ALIGN=RIGHT>
-			<A HREF="/apply/groups/$c[0]">Delete</A><BR>
+			<A HREF="/apply/groups/$c[0]" onclick="return confirm('Delete group $c[0]?')">Delete</A><BR>
 		</TD>
 	</TR>
 EOF
@@ -2275,7 +2294,7 @@ EOF
 			<A HREF="/settings/queues/$c[0]">$c[0]</A>
 		</TD>
 		<TD ALIGN=RIGHT>
-			<A HREF="/apply/queues/$c[0]">Delete</A><BR>
+			<A HREF="/apply/queues/$c[0]" onclick="return confirm('Delete queue $c[0]?')">Delete</A><BR>
 		</TD>
 	</TR>
 EOF