diff options
author | Christopher Burger <burgerc@freeside.biz> | 2018-11-20 12:35:49 -0500 |
---|---|---|
committer | Christopher Burger <burgerc@freeside.biz> | 2018-11-20 12:35:49 -0500 |
commit | cb8a5ae336bba47dfd9cdaccab11f8f1534a7069 (patch) | |
tree | 57c1b17cd94c4c2ea01fa9bdf11a04bee275a71a | |
parent | e52bf202f12e3d7cffa1d91b27b19ceb8a4c512b (diff) | |
parent | b5bce398b1dd80089ec363eb14107645cc5a546f (diff) |
Merge branch 'master' of ssh://git.freeside.biz/home/git/freeside
-rw-r--r-- | fs_selfservice/FS-SelfService/cgi/contact.html | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/fs_selfservice/FS-SelfService/cgi/contact.html b/fs_selfservice/FS-SelfService/cgi/contact.html index 20c15df78..7ae0d4880 100644 --- a/fs_selfservice/FS-SelfService/cgi/contact.html +++ b/fs_selfservice/FS-SelfService/cgi/contact.html @@ -3,22 +3,22 @@ <TR> <TH ALIGN="right"><%=$r%>Contact name<BR>(last, first)</TH> <TD COLSPAN=5> - <INPUT TYPE="text" NAME="<%=$pre%>last" VALUE="<%= ${$pre.'last'} %>" onChange="<%= $onchange %>" <%=$disabled%>> , - <INPUT TYPE="text" NAME="<%=$pre%>first" VALUE="<%= ${$pre.'first'} %>" onChange="<%= $onchange %>" <%=$disabled%>> + <INPUT TYPE="text" NAME="<%=$pre%>last" VALUE="<%= encode_entities(${$pre.'last'}) %>" onChange="<%= $onchange %>" <%=$disabled%>> , + <INPUT TYPE="text" NAME="<%=$pre%>first" VALUE="<%= encode_entities(${$pre.'first'}) %>" onChange="<%= $onchange %>" <%=$disabled%>> </TD> </TR> <TR> <TD ALIGN="right">Company</TD> <TD COLSPAN=7> - <INPUT TYPE="text" NAME="<%=$pre%>company" VALUE="<%= ${$pre.'company'} %>" SIZE=70 onChange="<%= $onchange %>" <%=$disabled%>> + <INPUT TYPE="text" NAME="<%=$pre%>company" VALUE="<%= encode_entities(${$pre.'company'}) %>" SIZE=70 onChange="<%= $onchange %>" <%=$disabled%>> </TD> </TR> <TR> <TH ALIGN="right"><%=$r%>Address</TH> <TD COLSPAN=7> - <INPUT TYPE="text" NAME="<%=$pre%>address1" VALUE="<%= ${$pre.'address1'} %>" SIZE=70 onChange="<%= $onchange %>" <%=$disabled%>> + <INPUT TYPE="text" NAME="<%=$pre%>address1" VALUE="<%= encode_entities(${$pre.'address1'}) %>" SIZE=70 onChange="<%= $onchange %>" <%=$disabled%>> </TD> </TR> @@ -37,14 +37,14 @@ %> </TD> <TD COLSPAN=7> - <INPUT TYPE="text" NAME="<%=$pre%>address2" VALUE="<%= ${$pre.'address2'} %>" SIZE=70 onChange="<%= $onchange %>" <%=$disabled%>> + <INPUT TYPE="text" NAME="<%=$pre%>address2" VALUE="<%= encode_entities(${$pre.'address2'}) %>" SIZE=70 onChange="<%= $onchange %>" <%=$disabled%>> </TD> </TR> <TR> <TH ALIGN="right"><%=$r%>City</TH> <TD> - <INPUT TYPE="text" ID="<%=$pre%>city" NAME="<%=$pre%>city" VALUE="<%= ${$pre.'city'} %>" onChange="<%= $onchange %>" <%=$disabled%>> + <INPUT TYPE="text" ID="<%=$pre%>city" NAME="<%=$pre%>city" VALUE="<%= encode_entities(${$pre.'city'}) %>" onChange="<%= $onchange %>" <%=$disabled%>> </TD> <%= ($county_html, $state_html, $country_html) = |