From 8ce67793df5ea77494f6587f297fb96271d03290 Mon Sep 17 00:00:00 2001
From: Philip Häusler <msquare@notrademark.de>
Date: Sat, 28 Dec 2013 02:14:49 +0100
Subject: form text fields now make htmlspecialchars

---
 includes/sys_template.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'includes/sys_template.php')

diff --git a/includes/sys_template.php b/includes/sys_template.php
index 569783a7..78519143 100644
--- a/includes/sys_template.php
+++ b/includes/sys_template.php
@@ -113,7 +113,7 @@ function form_submit($name, $label) {
  */
 function form_text($name, $label, $value, $disabled = false) {
   $disabled = $disabled ? ' disabled="disabled"' : '';
-  return form_element($label, '<input id="form_' . $name . '" type="text" name="' . $name . '" value="' . $value . '" ' . $disabled . '/>', 'form_' . $name);
+  return form_element($label, '<input id="form_' . $name . '" type="text" name="' . $name . '" value="' . htmlspecialchars($value) . '" ' . $disabled . '/>', 'form_' . $name);
 }
 
 /**
-- 
cgit v1.2.3-54-g00ecf