X-Git-Url: https://dev.renevier.net/gitweb.cgi?p=syp.git;a=blobdiff_plain;f=items.php;h=e2fe1dbbe272b222d6f12d5df6e03a75ffbd6044;hp=cd2cd91bb14c6aff37a52a2f250ce4e2231b4c26;hb=d9bd82ee3aafe693572f5313aec93a995b2102a2;hpb=3b38ca36fc18d34999073625a9c66dc2f05747a3

diff --git a/items.php b/items.php
index cd2cd91..e2fe1db 100644
--- a/items.php
+++ b/items.php
@@ -2,10 +2,6 @@
 /* Copyright (c) 2009 Arnaud Renevier, Inc, published under the modified BSD
    license. */
 
-require_once ("./inc/settings.php");
-require_once ("./inc/utils.php");
-require_once ("./inc/db/mysql.php");
-
 function headers_callback ($output) {
     $etag = md5 ($output);
     if ((isset ($_SERVER ["HTTP_IF_NONE_MATCH"])) && 
@@ -15,7 +11,8 @@ function headers_callback ($output) {
     }
 
     header ("Content-type: application/vnd.google-earth.kml+xml");
-    header ("Cache-control: must-revalidate");
+    // no-cache is needed otherwise IE does not try to get new version.
+    header ("Cache-control: no-cache, must-revalidate");
     header (sprintf ("ETag: %s", $etag));
 
     return $output;
@@ -29,7 +26,7 @@ function main ($features) {
 ';
 
     if (SITETITLE) {
-        printf ('    <name>%s</name>', SITETITLE);
+        printf ('    <name>%s</name>', htmlspecialchars (SITETITLE));
     }
     foreach ($features as $feature) {
         $id = $feature->id;
@@ -77,6 +74,12 @@ function main ($features) {
     </kml>';
 }
 
+if (!@include_once ("./inc/settings.php")) {
+    exit ("server error");
+}
+require_once ("./inc/utils.php");
+require_once ("./inc/db/mysql.php");
+
 try {
     $connection->connect (DBHOST, DBUSER, DBPWD, DBNAME, DBPREFIX);
     $features = $connection->listfeatures ($_GET ['from_user']);