diff --git a/app/edit/clip_list.php b/app/edit/clip_list.php
index 59d8a5c9fd..614df353d5 100644
--- a/app/edit/clip_list.php
+++ b/app/edit/clip_list.php
@@ -30,7 +30,7 @@
 	require_once "resources/check_auth.php";
 
 //check permissions
-	if (permission_exists('script_editor_view')) {
+	if (permission_exists('clip_view')) {
 		//access granted
 	}
 	else {
@@ -45,180 +45,183 @@
 	$language = new text;
 	$text = $language->get();
 
-
-function isfile($filename) {
-	return @filesize($filename) > 0 ? true : false;
-}
-
-function space($count) {
-	$r=''; $i=0;
-	while($i < $count) {
-		$r .= '     ';
-		$i++;
+//check if this is a file
+	function isfile($filename) {
+		return @filesize($filename) > 0 ? true : false;
 	}
-	return $r;
-}
 
-echo "<script type=\"text/javascript\" language=\"javascript\">\n";
-echo "    function makeRequest(url, strpost) {\n";
-echo "        var http_request = false;\n";
-echo "\n";
-echo "        if (window.XMLHttpRequest) { // Mozilla, Safari, ...\n";
-echo "            http_request = new XMLHttpRequest();\n";
-echo "            if (http_request.overrideMimeType) {\n";
-echo "                http_request.overrideMimeType('text/xml');\n";
-echo "                // See note below about this line\n";
-echo "            }\n";
-echo "        } else if (window.ActiveXObject) { // IE\n";
-echo "            try {\n";
-echo "                http_request = new ActiveXObject(\"Msxml2.XMLHTTP\");\n";
-echo "            } catch (e) {\n";
-echo "                try {\n";
-echo "                    http_request = new ActiveXObject(\"Microsoft.XMLHTTP\");\n";
-echo "                } catch (e) {}\n";
-echo "            }\n";
-echo "        }\n";
-echo "\n";
-echo "        if (!http_request) {\n";
-echo "            alert('".$text['message-give-up']."');\n";
-echo "            return false;\n";
-echo "        }\n";
-echo "        http_request.onreadystatechange = function() { returnContent(http_request); };\n";
-echo "        if (http_request.overrideMimeType) {\n";
-echo "            http_request.overrideMimeType('text/html');\n";
-echo "        }\n";
-echo "        http_request.open('POST', url, true);\n";
-echo "\n";
-echo "\n";
-echo "        if (strpost.length == 0) {\n";
-echo "            //http_request.send(null);\n";
-echo "            http_request.send('name=value&foo=bar');\n";
-echo "        }\n";
-echo "        else {\n";
-echo "            http_request.setRequestHeader('Content-Type','application/x-www-form-urlencoded');\n";
-echo "            http_request.send(strpost);\n";
-echo "        }\n";
-echo "\n";
-echo "    }\n";
-echo "\n";
-echo "    function returnContent(http_request) {\n";
-echo "\n";
-echo "        if (http_request.readyState == 4) {\n";
-echo "            if (http_request.status == 200) {\n";
+//count the spaces
+	function space($count) {
+		$r=''; $i=0;
+		while($i < $count) {
+			$r .= '     ';
+			$i++;
+		}
+		return $r;
+	}
 
-echo "                  parent.editAreaLoader.setValue('edit1', http_request.responseText); \n";
-echo "\n";
+//setup ajax
+	echo "<script type=\"text/javascript\" language=\"javascript\">\n";
+	echo "    function makeRequest(url, strpost) {\n";
+	echo "        var http_request = false;\n";
+	echo "\n";
+	echo "        if (window.XMLHttpRequest) { // Mozilla, Safari, ...\n";
+	echo "            http_request = new XMLHttpRequest();\n";
+	echo "            if (http_request.overrideMimeType) {\n";
+	echo "                http_request.overrideMimeType('text/xml');\n";
+	echo "                // See note below about this line\n";
+	echo "            }\n";
+	echo "        } else if (window.ActiveXObject) { // IE\n";
+	echo "            try {\n";
+	echo "                http_request = new ActiveXObject(\"Msxml2.XMLHTTP\");\n";
+	echo "            } catch (e) {\n";
+	echo "                try {\n";
+	echo "                    http_request = new ActiveXObject(\"Microsoft.XMLHTTP\");\n";
+	echo "                } catch (e) {}\n";
+	echo "            }\n";
+	echo "        }\n";
+	echo "\n";
+	echo "        if (!http_request) {\n";
+	echo "            alert('".$text['message-give-up']."');\n";
+	echo "            return false;\n";
+	echo "        }\n";
+	echo "        http_request.onreadystatechange = function() { returnContent(http_request); };\n";
+	echo "        if (http_request.overrideMimeType) {\n";
+	echo "            http_request.overrideMimeType('text/html');\n";
+	echo "        }\n";
+	echo "        http_request.open('POST', url, true);\n";
+	echo "\n";
+	echo "\n";
+	echo "        if (strpost.length == 0) {\n";
+	echo "            //http_request.send(null);\n";
+	echo "            http_request.send('name=value&foo=bar');\n";
+	echo "        }\n";
+	echo "        else {\n";
+	echo "            http_request.setRequestHeader('Content-Type','application/x-www-form-urlencoded');\n";
+	echo "            http_request.send(strpost);\n";
+	echo "        }\n";
+	echo "\n";
+	echo "    }\n";
+	echo "\n";
+	echo "    function returnContent(http_request) {\n";
+	echo "\n";
+	echo "        if (http_request.readyState == 4) {\n";
+	echo "            if (http_request.status == 200) {\n";
 
-echo "            }\n";
-echo "            else {\n";
-echo "                alert('".$text['message-problem']."');\n";
-echo "            }\n";
-echo "        }\n";
-echo "\n";
-echo "    }\n";
-echo "</script>";
+	echo "                  parent.editAreaLoader.setValue('edit1', http_request.responseText); \n";
+	echo "\n";
 
-//echo "// ---------------------------------------------\n";
-//echo "// --- http://www.codeproject.com/jscript/dhtml_treeview.asp\n";
-//echo "// --- Name:    Easy DHTML Treeview           --\n";
-//echo "// --- Author:  D.D. de Kerf                  --\n";
-//echo "// --- Version: 0.2          Date: 13-6-2001  --\n";
-//echo "// ---------------------------------------------\n";
-echo "<script language='JavaScript'>\n";
-echo "function Toggle(node) {\n";
-echo "	// Unfold the branch if it isn't visible\n";
-echo "	if (node.nextSibling.style.display == 'none')	{\n";
-echo "  		node.nextSibling.style.display = 'block';\n";
-echo "	}\n";
-echo "	// Collapse the branch if it IS visible\n";
-echo "	else	{\n";
-echo "  		node.nextSibling.style.display = 'none';\n";
-echo "	}\n";
-echo "\n";
-echo "}\n";
-echo "</script>";
+	echo "            }\n";
+	echo "            else {\n";
+	echo "                alert('".$text['message-problem']."');\n";
+	echo "            }\n";
+	echo "        }\n";
+	echo "\n";
+	echo "    }\n";
+	echo "</script>";
+
+//setup the tree view
+	//echo "// ---------------------------------------------\n";
+	//echo "// --- http://www.codeproject.com/jscript/dhtml_treeview.asp\n";
+	//echo "// --- Name:    Easy DHTML Treeview           --\n";
+	//echo "// --- Author:  D.D. de Kerf                  --\n";
+	//echo "// --- Version: 0.2          Date: 13-6-2001  --\n";
+	//echo "// ---------------------------------------------\n";
+	echo "<script language='JavaScript'>\n";
+	echo "function Toggle(node) {\n";
+	echo "	// Unfold the branch if it isn't visible\n";
+	echo "	if (node.nextSibling.style.display == 'none')	{\n";
+	echo "  		node.nextSibling.style.display = 'block';\n";
+	echo "	}\n";
+	echo "	// Collapse the branch if it IS visible\n";
+	echo "	else	{\n";
+	echo "  		node.nextSibling.style.display = 'none';\n";
+	echo "	}\n";
+	echo "\n";
+	echo "}\n";
+	echo "</script>";
 
 // keyboard shortcut bindings
-echo "<script language='JavaScript' type='text/javascript' src='".PROJECT_PATH."/resources/jquery/jquery-3.4.1.min.js'></script>\n";
-echo "<script src='https://code.jquery.com/jquery-migrate-3.1.0.js'></script>\n";
+	echo "<script language='JavaScript' type='text/javascript' src='".PROJECT_PATH."/resources/jquery/jquery-3.4.1.min.js'></script>\n";
+	echo "<script src='https://code.jquery.com/jquery-migrate-3.1.0.js'></script>\n";
 
 //save file
-key_press('ctrl+s', 'down', 'window', null, null, "if (parent.document.getElementById('frm_edit')) { parent.$('form#frm_edit').submit(); return false; }", true);
+	key_press('ctrl+s', 'down', 'window', null, null, "if (parent.document.getElementById('frm_edit')) { parent.$('form#frm_edit').submit(); return false; }", true);
 
 //open file manager/clip library pane
-key_press('ctrl+q', 'down', 'window', null, null, "if (parent.document.getElementById('sidebar')) { parent.toggle_sidebar(); parent.focus_editor(); return false; }", true);
+	key_press('ctrl+q', 'down', 'window', null, null, "if (parent.document.getElementById('sidebar')) { parent.toggle_sidebar(); parent.focus_editor(); return false; }", true);
 
 //prevent backspace (browser history back)
-key_press('backspace', 'down', 'window', null, null, 'return false;', true);
+	key_press('backspace', 'down', 'window', null, null, 'return false;', true);
 
 //keyboard shortcut to execute command (when included on command page)
-key_press('ctrl+enter', 'down', 'window', null, null, "if (!parent.document.getElementById('sidebar')) { parent.$('form#frm').submit(); return false; }", true);
+	key_press('ctrl+enter', 'down', 'window', null, null, "if (!parent.document.getElementById('sidebar')) { parent.$('form#frm').submit(); return false; }", true);
 
-echo "</head>\n";
-echo "<body style='margin: 0; padding: 5px;' onfocus='blur();'>\n";
+//show the content
+	echo "</head>\n";
+	echo "<body style='margin: 0; padding: 5px;' onfocus='blur();'>\n";
 
-echo "<div style='text-align: left; padding-top: 3px;'>\n";
-echo "<div style='padding-bottom: 3px;'><a href='javascript:void(0);' onclick=\"window.open('clip_options.php?id=".$row[id]."','clipwin','left=20,top=20,width=310,height=350,toolbar=0,resizable=0');\" style='text-decoration:none; cursor: pointer;' title=\"".$text['label-clip-library']."\"><img src='".PROJECT_PATH."resources/images/icon_gear.png' border='0' align='absmiddle' style='margin: 0px 2px 4px -1px;'>".$text['label-clip-library']."</a></div>\n";
+	echo "<div style='text-align: left; padding-top: 3px;'>\n";
+	echo "<div style='padding-bottom: 3px;'><a href='javascript:void(0);' onclick=\"window.open('clip_options.php?id=".$row[id]."','clipwin','left=20,top=20,width=310,height=350,toolbar=0,resizable=0');\" style='text-decoration:none; cursor: pointer;' title=\"".$text['label-clip-library']."\"><img src='".PROJECT_PATH."resources/images/icon_gear.png' border='0' align='absmiddle' style='margin: 0px 2px 4px -1px;'>".$text['label-clip-library']."</a></div>\n";
 
-$sql = "select * from v_clips order by clip_folder asc, clip_name asc";
-$database = new database;
-$result = $database->select($sql, null, 'all');
-unset($sql);
+	$sql = "select * from v_clips order by clip_folder asc, clip_name asc";
+	$database = new database;
+	$result = $database->select($sql, null, 'all');
+	unset($sql);
 
-if (is_array($result) && @sizeof($result) != 0) {
-	$master_array = array();
-	foreach ($result as $row) {
-		$clip_folder = rtrim($row['clip_folder'], '/');
-		$clip_folder .= '/'.$row['clip_name'];
+	if (is_array($result) && @sizeof($result) != 0) {
+		$master_array = array();
+		foreach ($result as $row) {
+			$clip_folder = rtrim($row['clip_folder'], '/');
+			$clip_folder .= '/'.$row['clip_name'];
 
-		$parts = explode('/', $clip_folder);
-		$folders = array();
-		while ($bottom = array_pop($parts)) {
-			if (sizeof($folders) > 0) {
-				$folders = array($bottom => $folders);
-			}
-			else {
-				$clip['uuid'] = $row['clip_uuid'];
-				$clip['name'] = $row['clip_name'];
-				$clip['before'] = $row['clip_text_start'];
-				$clip['after'] = $row['clip_text_end'];
-				$folders = array($bottom => $clip);
-			}
-		}
-
-		$master_array = array_merge_recursive($master_array, $folders);
-	}
-	unset($result, $row);
-
-	function parse_array($arr) {
-		if (is_array($arr)) {
-			//folder/clip
-			foreach ($arr as $name => $sub_arr) {
-				if ($name != $sub_arr['name']) {
-					//folder
-					echo "<a onclick='Toggle(this);' style='display: block; cursor: pointer; text-decoration: none;'><img src='resources/images/icon_folder.png' border='none' align='absmiddle' style='margin: 1px 2px 3px 0px;'>".$name."</a>";
-					echo "<div style='display: none; padding-left: 16px;'>\n";
-					parse_array($sub_arr);
-					echo "</div>\n";
+			$parts = explode('/', $clip_folder);
+			$folders = array();
+			while ($bottom = array_pop($parts)) {
+				if (sizeof($folders) > 0) {
+					$folders = array($bottom => $folders);
 				}
 				else {
-					//clip
-					echo "<div style='white-space: nowrap;'>\n";
-					echo "<a href='javascript:void(0);' onclick=\"parent.insert_clip(document.getElementById('before_".$sub_arr['uuid']."').value, document.getElementById('after_".$sub_arr['uuid']."').value);\">";
-					echo "<img src='resources/images/icon_file.png' border='0' align='absmiddle' style='margin: 1px 2px 3px -1px;'>";
-					echo $sub_arr['name'];
-					echo "</a>\n";
-					echo "<textarea style='display: none' id='before_".$sub_arr['uuid']."'>".$sub_arr['before']."</textarea>\n";
-					echo "<textarea style='display: none' id='after_".$sub_arr['uuid']."'>".$sub_arr['after']."</textarea>\n";
-					echo "</div>\n";
+					$clip['uuid'] = $row['clip_uuid'];
+					$clip['name'] = $row['clip_name'];
+					$clip['before'] = $row['clip_text_start'];
+					$clip['after'] = $row['clip_text_end'];
+					$folders = array($bottom => $clip);
+				}
+			}
+
+			$master_array = array_merge_recursive($master_array, $folders);
+		}
+		unset($result, $row);
+
+		function parse_array($arr) {
+			if (is_array($arr)) {
+				//folder/clip
+				foreach ($arr as $name => $sub_arr) {
+					if ($name != $sub_arr['name']) {
+						//folder
+						echo "<a onclick='Toggle(this);' style='display: block; cursor: pointer; text-decoration: none;'><img src='resources/images/icon_folder.png' border='none' align='absmiddle' style='margin: 1px 2px 3px 0px;'>".$name."</a>";
+						echo "<div style='display: none; padding-left: 16px;'>\n";
+						parse_array($sub_arr);
+						echo "</div>\n";
+					}
+					else {
+						//clip
+						echo "<div style='white-space: nowrap;'>\n";
+						echo "<a href='javascript:void(0);' onclick=\"parent.insert_clip(document.getElementById('before_".$sub_arr['uuid']."').value, document.getElementById('after_".$sub_arr['uuid']."').value);\">";
+						echo "<img src='resources/images/icon_file.png' border='0' align='absmiddle' style='margin: 1px 2px 3px -1px;'>";
+						echo escape($sub_arr['name']);
+						echo "</a>\n";
+						echo "<textarea style='display: none' id='before_".$sub_arr['uuid']."'>".$sub_arr['before']."</textarea>\n";
+						echo "<textarea style='display: none' id='after_".$sub_arr['uuid']."'>".$sub_arr['after']."</textarea>\n";
+						echo "</div>\n";
+					}
 				}
 			}
 		}
+		parse_array($master_array);
 	}
-	parse_array($master_array);
-}
-
-echo "</div>\n";
+	echo "</div>\n";
 
 //inclue the footer
 require_once "footer.php";