1. Store the parameters inside template /config.php, so that the template will be configured easily
2. Minor layout fix
3. Security Fix (Important!)
4. Supports PHP.ini > short_open_tag = off

images\postit-small.gif
images\postit.gif
images\PremiumPostit-large.gif
images\premiumpostit.gif
include\_adv-top.php
include\_adv.php
include\_em_panel.php
include\_index_js_login_form.php
include\_index_quicksearch.php
include\_js_panel.php
include\functions.inc.php
js\general.js
candidate-login-form.php
candidate-login.php
candidate-signup-form.php
candidates-footer.php
candidates-header.php
display-post.php
employer-login.php
employer-signup-form.php
employers-footer.php
employers-header.php
index-employer.php
index-footer.php
index-header.php
index-home.php
info-box-top.php
js-menu.css
nas_contacts.php
nas_email_others_window.php
nas_footer_link.php
nas_hbar.php
nas_hbar_cust.php
nas_static.php
posting-form.php
profile-form.php
readme.txt
resume-form.php
images\coins.gif
config.php

1) Store the parameters inside /config.php, so that the template will be configured easily

edit:
/index-header.php
/candidates-header.php
/employers-header.php

ADD AT TOP:
<?php require_once(dirname(__FILE__).'/config.php');    ?>

edit:
/index-home.php
CHANGE:
JB_list_jobs ("PREMIUM");

TO:
if (NAS_1005_HOME_SHOW_PREMIUM_JOB == 'YES') JB_list_jobs ("PREMIUM");

CHANGE:
JB_list_jobs ("ALL");

TO:
if (NAS_1005_HOME_SHOW_STANDARD_JOB == 'YES')JB_list_jobs ("ALL");

edit:
/nas_footer_link.php

FIND:
<div id="footer_nas">..</div>

WRAP IT BY:
<?php if (NAS_1005_FOOTER_SHOW_NAS_LABEL == 'YES') { ?>
<div id="footer_nas">..</div>
<?php } ?>

2) Minor fix for Homepage Layout formatting

edit: /index-home.php

delete <div style="width:100%; padding-top:1px; text-align:center;">..</div>
within
<div id="cat_1"></div> to <div id="cat_6"></div>


3) Setting category column configurable in Admin

edit: /index-home.php

CHANGE:
JB_display_categories($categories, 3);

TO:
JB_display_categories($categories, JB_CAT_COLS);


4) Fix for Homepage right-sidebar "Search Box" width formatting
Truncate the category name in the search box option if it is too long.

edit:
/include/_index_quicksearch.php

AFTER: $categories = JB_getCatStruct($cat, $_SESSION["LANG"], 1);
ADD: $catname_cutoff = 23;

CHANGE:
for ($x=0; $x < $categories[$j]['chc']; $x++) {
if (CAT_NAME_CUTOFF == "YES") {                           
$children[$x]['n'] = truncate_html_str($children[$x]['n'], CAT_NAME_CUTOFF_CHARS);                           
}                                           
echo "<option value=\"".$children[$x]['cid']."\">".$children[$x]['n']."</option>";                                                       
} //end of for $x loop

TO:

for ($x=0; $x < $categories[$j]['chc']; $x++) {                                                   
$children[$x]['n'] = JB_truncate_html_str($children[$x]['n'], $catname_cutoff);             
echo "<option value=\"".$children[$x]['cid']."\">".$children[$x]['n']."</option>";                                                       
} //end of for $x loop


5) Bug fix: Add to "My Favorite icon" on top right ONLY work in IE6 / 7, but not Firefox

edit:
/js/general.js

function createBookmarkLink() {
sTitle = document.title;
sUrl = window.location.href;

if (document.all) {
// For IE
window.external.AddFavorite(sUrl, sTitle);

}else if (window.external && window.external.AddFavorite) {
window.external.AddFavorite(sUrl, sTitle);

}else if (window.sidebar && window.sidebar.addPanel) {
window.sidebar.addPanel(sTitle, sUrl, "");

}else {
//alert("do it yourself");
}
}

6) Security Fix
nas_static?page=XXX
Using $_REQUEST['page'] = preg_replace('/[^a-z]+/i', '', $_REQUEST['page']); // sanitize
That makes sure only A-Z can be in the parameter


CHANGE:
$page = $_REQUEST['page'];     
require (dirname(__FILE__).'/lang/' .$_SESSION["LANG"] . '/' . $page .'.php');

TO:     
$_SESSION["LANG"] = preg_replace('/[^a-z]+/i', '', $_SESSION["LANG"]);
$page = preg_replace('/[^a-z^_^-]+/i', '', $_REQUEST['page']);  
require (dirname(__FILE__).'/lang/' .$_SESSION["LANG"] . '/' . $page .'.php');

7) Security Fix
Use JB_escape_sql() on any data put in an SQL query

edit:
display-post.php
index-employer.php
include\functions.inc.php
include\_index_quicksearch.php

8) Security Fix
Use JB_escape_sql() on any data display directly from DB

edit:
display-post.php

CHANGE:
<?= $empl_row['CompName'] ?>
TO:
<?php echo JB_escape_sql($empl_row['CompName']) ?>


9) Other fix
edit:

display-post.php
CHANGE
$empl_row[CompName] -> $empl_row['CompName']
$empl_row[FirstName] -> $empl_row['FirstName']
$empl_row[LastName] -> $empl_row['LastName']

10) Follow the change in default template.

edit:
/candidates-header.php

CHANGE:
<meta http-equiv="description" content="<?php echo JB_SITE_DESCRIPTION; ?>">
<meta http-equiv="keywords" content="<?php echo JB_SITE_KEYWORDS; ?>">        

TO:
<meta http-equiv="description" content="<?php echo jb_escape_html(JB_SITE_DESCRIPTION); ?>">
<meta http-equiv="keywords" content="<?php echo jb_escape_html(JB_SITE_KEYWORDS); ?>">


edit:
/display-post.php

CHANGE:    
$order_str = "&order_by=".$_REQUEST['order_by']."&ord=".$ord;

TO:
$order_str = "&order_by=".$_REQUEST['order_by']."&ord=".$ord;


CHANGE:
if ($prams['guid']=='') { // the job is form this site.
$mode = "view";
JB_display_posting_form (1, $mode, $prams, $admin);
}

TO:    
//if ($prams['guid']=='') { // the job is form this site.
$mode = "view";
JB_display_posting_form (1, $mode, $prams, $admin);
//}


edit:
/js-menu.css

CHANGE:    
.XulMenu .item img { position: inline; }

TO:
.XulMenu .item img { position: static; }


edit:
/posting-form.php

CHANGE:

<?php if (JB_MAP_DISABLED != 'YES' ) {

$JB_MAP_IMAGE_FILE = 'map-small.jpg';
$JB_PIN_IMAGE_FILE = 'pin.gif';

?>        

TO:
<?php if (JB_MAP_DISABLED != 'YES' ) { ?>        


edit:
/resume-form.php
Top Comment is updated.


11) Remove files

remove:
/employe-request-form.php
/employer-email-form.php


12) Supports PHP.ini > short_open_tag = off

CHANGE ALL <?= ?> to <?php echo  ?>

13) Remove " - keyword :: search" value in homepage search form textfield to avoid misunderstanding.

edit:
/include/_index_quicksearch.php

14) Update Employer Menu images

edit:
/eployer-menu.php
/images/postit-small.gif
/images/postit.gif
/images/PremiumPostit-large.gif
/images/premiumpostit.gif