added escaping for group and view names

added logout link

htdocs/lang/en.utf8/mahara.php

@@ -87,6 +87,7 @@ $string['strftimenotspecified']  = 'Not specified';
 // profile sideblock strings
 $string['invitedgroup'] = '1 group invited to';
 $string['invitedgroups'] = '%s groups invited to';
+$string['logout'] = 'Logout';
 $string['pendingfriend'] = '1 pending friend';
 $string['pendingfriends'] = '%s pending friends';
 

htdocs/theme/default/templates/sideblocks/profile.tpl

-    <h3><a href="{$WWWROOT}user/view.php?id={$data.id}">{$data.id|display_name|escape}</a></h3>
-    <img src="{$WWWROOT}thumb.php?type=profileicon&amp;maxsize=50&amp;id={$data.id}" alt="">
+    <h3><a style="color:white" href="{$WWWROOT}user/view.php?id={$data.id}">{$data.id|display_name|escape}</a></h3>
+    <a href="{$WWWROOT}user/view.php?id={$data.id}"><img src="{$WWWROOT}thumb.php?type=profileicon&amp;maxsize=50&amp;id={$data.id}" alt=""></a>
+    <a href="{$WWWROOT}?logout">{str tag="logout"}</a>
     <ul style="color:black">
         {if $data.unreadnotifications}<li><a href="{$WWWROOT}account/activity/">{$data.unreadnotifications}</a></li>{/if}
         {if $data.invitedgroups}<li><a href="{$WWWROOT}group/mygroups.php?filter=invited">{$data.invitedgroups}</a></li>{/if}
         {if $data.pendingfriends}<li><a href="{$WWWROOT}user/?filter=2">{$data.pendingfriends}</a></li>{/if}
         {if $data.groups}
         <li>
-            <a href="{$WWWROOT}/group/mygroups.php?filter=owned">{str tag="groupsiown"}:</a>
+            <a href="{$WWWROOT}group/mygroups.php?filter=owned">{str tag="groupsiown"}:</a>
             <ul>
             {foreach from=$data.groups item=group}
-                <li><a href="{$WWWROOT}group/view.php?id={$group->id}">{$group->name}</a></li>
+                <li><a href="{$WWWROOT}group/view.php?id={$group->id}">{$group->name|escape}</a></li>
             {/foreach}
             </ul>
         </li>
@@ -19,7 +20,7 @@
             <a href="{$WWWROOT}view/">{str tag="myviews"}:</a>
             <ul>
             {foreach from=$data.views item=view}
-                <li><a href="{$WWWROOT}view/view.php?id={$view->id}">{$view->title}</a></li>
+                <li><a href="{$WWWROOT}view/view.php?id={$view->id}">{$view->title|escape}</a></li>
             {/foreach}
             </ul>
         </li>