			list($h, $m) = explode('.', $row['RunAt']);

			$main .= '<div style="' . $extra_css . '" class="phoromatic_overview_box">';
			$main .= '<h1><a href="?schedules/' . $row['ScheduleID'] . '">' . $row['Title'] . '</a></h1>';

			if(!empty($systems_for_schedule))
			{
				if($row['RunAt'] > date('H.i'))
				{
					$run_in_future = true;
					$main .= '<h3>Runs In ' . pts_strings::format_time((($h * 60) + $m) - ((date('H') * 60) + date('i')), 'MINUTES') . '</h3>';
				}
				else
				{
					$run_in_future = false;
					$main .= '<h3>Triggered ' . pts_strings::format_time(max(1, (date('H') * 60) + date('i') - (($h * 60) + $m)), 'MINUTES') . ' Ago</h3>';
				}
			}

			foreach($systems_for_schedule as $system_id)
			{
				$pprid = self::result_match($row['ScheduleID'], $system_id, date('Y-m-d'));

				if($pprid)
					$main .= '<a href="?result/' . $pprid . '">';

				$main .= phoromatic_server::system_id_to_name($system_id);

				if($pprid)
					$main .= '</a>';
				else if(!$run_in_future)
				{
					$sys_info = self::system_info($system_id);
					$last_comm_diff = time() - strtotime($sys_info['LastCommunication']);

					$main .= ' <sup><a href="?systems/' . $system_id . '">';
					if($last_comm_diff > 3600)
					{
						$main .= '<strong>Last Communication: ' . pts_strings::format_time($last_comm_diff, 'SECONDS', true, 60) . ' Ago</strong>';
					}
					else
					{
						$main .= $sys_info['CurrentTask'];
					}
					$main .= '</a></sup>';
				}
				$main .= '<br />';
			}

			$main .= '</div>';
		}
		$main .= '</div>';

		$main .= '</div>';

		echo '<div id="pts_phoromatic_main_area">' . $main . '</div>';
		//echo phoromatic_webui_main($main, phoromatic_webui_right_panel_logged_in());
		echo phoromatic_webui_footer();
	}
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.