From 487b5b25dbf9457228e1ad55c737de9dd927714f Mon Sep 17 00:00:00 2001
From: altatof <christophe@altairis.fr>
Date: Fri, 13 Jan 2017 15:37:33 +0100
Subject: [PATCH] FIX: extrafield input for varchar was not working with
special char within (ie double quotes)
---
htdocs/core/class/extrafields.class.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/htdocs/core/class/extrafields.class.php b/htdocs/core/class/extrafields.class.php
index 496a8f2e251..63621d56a82 100644
--- a/htdocs/core/class/extrafields.class.php
+++ b/htdocs/core/class/extrafields.class.php
@@ -763,7 +763,7 @@ class ExtraFields
}
elseif ($type == 'phone')
{
- $out='<input type="text" class="flat" name="'.$keysuffix.'options_'.$key.$keyprefix.'" size="20" value="'.$value.'" '.($moreparam?$moreparam:'').'>';
+ $out='<input type="text" class="flat" name="'.$keysuffix.'options_'.$key.$keyprefix.'" size="20" value="'.htmlentities($value).'" '.($moreparam?$moreparam:'').'>';
}
elseif ($type == 'price')
{
--
GitLab