X-Git-Url: http://erislabs.net/gitweb/?a=blobdiff_plain;f=templates-dist%2Fadmin%2Fuser.template;h=5918ca64b63646d522c6efa3951ce47cd1822f6c;hb=b824bb63090abfabe99b73f57246df760748d0f9;hp=eeaff33824639af5af3c5ab3e2585e8f6d2e32af;hpb=e096ea3195a90521acdf06c44d05abac609cb9ea;p=mir.git

diff --git a/templates-dist/admin/user.template b/templates-dist/admin/user.template
index eeaff338..5918ca64 100755
--- a/templates-dist/admin/user.template
+++ b/templates-dist/admin/user.template
@@ -9,7 +9,7 @@ ${lang("user.htmltitle")}
 <include "admin/head.template">
 <form action="${config.actionRoot}" method="post">
 	<input type="hidden" name="module" value="Users">
-	<input type="hidden" name="id" value="${id}">
+	<input type="hidden" name="id" value="${encodeHTML(id)}">
 	<if new><input type="hidden" name="do" value="insert">
 	<else><input type="hidden" name="do" value="update"></if>
 <table border="0">
@@ -17,19 +17,19 @@ ${lang("user.htmltitle")}
     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
 	<B>${lang("user.login")}:</B></font></td>
     <td>
-      <input type="text" size="40" name="login" value="${login}">
+      <input type="text" size="40" name="login" value="${encodeHTML(login)}">
     </td>
   </tr>
   <tr> 
     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
 	<B>${lang("user.password")}:</B></font></td>
     <td>
-      <input type="text" size="20" name="password" value="${password}">
+      <input type="text" size="20" name="password" value="${encodeHTML(password)}">
     </td>
   </tr>
   <tr> 
     <td align="right" bgcolor="#006600"><font color="#ffffff" face="Verdana, Arial, Helvetica, sans-serif" size="-1">
-	<B>${lang("user.admin")}:</B><font color="#CCCCCC">(<a href="${docRoot}/help/users.html#admin" target="_help">?</a>)</font></font></td>
+	<B>${lang("user.admin")}:</B><font color="#CCCCCC">(<a href="${encodeHTML(docRoot)}/help/users.html#admin" target="_help">?</a>)</font></font></td>
     <td>
 	    <input type="checkbox" name="is_admin" value="1"<if is_admin=="1"> checked</if>>
     </td>