- <input type="hidden" name="dbhost" value="<TMPL_VAR dbhost ESCAPE=HTML>">
- <input type="hidden" name="dbport" value="<TMPL_VAR dbport ESCAPE=HTML>">
- <input type="hidden" name="dbuser" value="<TMPL_VAR dbuser ESCAPE=HTML>">
+ <input type="hidden" name="dbhost" value="[% HTML.escape(dbhost) %]">
+ <input type="hidden" name="dbport" value="[% HTML.escape(dbport) %]">
+ <input type="hidden" name="dbuser" value="[% HTML.escape(dbuser) %]">
+ <input type="hidden" name="dbpasswd" value="[% HTML.escape(dbpasswd) %]">