// fix htmlentities in .tpl

2012-02-01 18:00:32 +00:00
parent 3e51fad32e
commit 7a36bc48d9
27 changed files with 46 additions and 46 deletions
@@ -166,7 +166,7 @@
 					<option value="4" {if {$search_type} == 4} selected="selected" {/if}>{l s='invoices'}</option>
 					<option value="5" {if {$search_type} == 5} selected="selected" {/if}>{l s='carts'}</option>
 				</select>
-				<input type="text" name="bo_query" id="bo_query" value="{$bo_query}" />
+				<input type="text" name="bo_query" id="bo_query" value="{$bo_query|htmlentities}" />
 				<input type="submit" id="bo_search_submit" class="button" value="{l s='Search'}"/>
 			</form>
 		</div>