// Fix xss

2011-12-19 17:47:24 +00:00
parent ab2af6ff20
commit d10cef87f9
1 changed files with 3 additions and 2 deletions
@@ -50,7 +50,8 @@
 			{foreach from=$shop_details['zones'] key=id_zone item=currentZone}
 				<label>{$currentZone['name']}</label>
 				<div class="margin-form">
-					<input type="text" name="zone_{$id_zone}" value="{$currentZone['account_number']}" />
+					<input type="text" name="zone_{$id_zone}" value="{$currentZone['account_number']|escape:htmlall}" />
+
 				</div>
 			{/foreach}
 			<div class="margin-form">
@@ -59,4 +60,4 @@
 		</form>
 		<div class="separation"></div>
 	</fieldset>
-{/if}
+{/if}