- <input type="hidden" name="path" value="<TMPL_VAR NAME=path ESCAPE=HTML>">
- <input type="hidden" name="login" value="<TMPL_VAR NAME=login ESCAPE=HTML>">
- <input type="hidden" name="password" value="<TMPL_VAR NAME=password ESCAPE=HTML>">
+ <input type="hidden" name="login" value="[% HTML.escape(login) %]">
+ <input type="hidden" name="password" value="[% HTML.escape(password) %]">