$html .= '<TD VALIGN="top">'. ntable("#cccccc",2).
'<TR><TD ALIGN="right" VALIGN="top">Service<BR>Address</TD><TD BGCOLOR="#ffffff">';
$html .= join('<BR>',
- grep $_,
+ map encode_entities($_), grep $_,
$cust_main->contact,
$cust_main->company,
$ship->address1,
<TD COLSPAN=8>
<INPUT TYPE="text" SIZE=15
NAME="enter_censustract"
- VALUE="<% $object->censustract %>">
+ VALUE="<% $object->censustract |h %>">
<% '(automatic)' %>
</TD>
</TR>
<TD COLSPAN=8>
<INPUT TYPE="text" SIZE=15
NAME="<%$pre%>district"
- VALUE="<% $object->district %>">
+ VALUE="<% $object->district |h %>">
<% '(automatic)' %>
</TD>
</TR>