X-Git-Url: http://git.freeside.biz/gitweb/?p=freeside.git;a=blobdiff_plain;f=FS%2FFS%2Fpart_virtual_field.pm;h=f5a416110e44277894446e96dc9fb3bbaa162630;hp=03c34cca526ea41f331fbd52f3fe0475afeb55d7;hb=74e058c8a010ef6feb539248a550d0bb169c1e94;hpb=eb9668a6f3181ee02cb335272c5ee4616e61fd09

diff --git a/FS/FS/part_virtual_field.pm b/FS/FS/part_virtual_field.pm
index 03c34cca5..f5a416110 100755
--- a/FS/FS/part_virtual_field.pm
+++ b/FS/FS/part_virtual_field.pm
@@ -2,7 +2,9 @@ package FS::part_virtual_field;
 
 use strict;
 use vars qw( @ISA );
-use FS::Record qw( qsearchs qsearch dbdef );
+use FS::Record;
+use FS::Schema qw( dbdef );
+use CGI qw(escapeHTML);
 
 @ISA = qw( FS::Record );
 
@@ -161,7 +163,7 @@ sub check {
 
   # Make sure it's a real table with a numeric primary key
   my ($table, $pkey);
-  if($table = $FS::Record::dbdef->table($self->dbtable)) {
+  if($table = dbdef->table($self->dbtable)) {
     if($pkey = $table->primary_key) {
       if($table->column($pkey)->type =~ /int/i) {
         # this is what it should be
@@ -243,7 +245,7 @@ sub widget {
         }
       } else {
         $text .= q!<INPUT NAME="! . $self->name .
-                q!" VALUE="! . $value . q!"!;
+                q!" VALUE="! . escapeHTML($value) . q!"!;
         if ($self->length) {
           $text .= q! SIZE="! . $self->length . q!"!;
         }
@@ -259,10 +261,6 @@ sub widget {
   return $text;
 }
 
-=head1 VERSION
-
-$Id: part_virtual_field.pm,v 1.2 2003-08-05 00:20:45 khoff Exp $
-
 =head1 NOTES
 
 =head2 Semantics of check_block: