From: Sven Schöling <s.schoeling@linet-services.de>
Date: Fri, 30 Oct 2009 12:27:23 +0000 (+0100)
Subject: cp.pl: vc select richtig escapen
X-Git-Tag: release-2.6.1beta1~137
X-Git-Url: http://wagnertech.de/git?a=commitdiff_plain;h=275dbec9c8aedbf54e0aaeb7f12710306df44579;p=kivitendo-erp.git

cp.pl: vc select richtig escapen
---

diff --git a/bin/mozilla/cp.pl b/bin/mozilla/cp.pl
index 94e0748dc..195a05153 100644
--- a/bin/mozilla/cp.pl
+++ b/bin/mozilla/cp.pl
@@ -246,9 +246,9 @@ sub form_header {
               <tr>
                 <th align=right>$vclabel</th>
                 <td>$vc</td>
-                <input type=hidden name="select$form->{vc}" value="$form->{"select$form->{vc}"}">
-                <input type=hidden name="$form->{vc}_id" value=$form->{"$form->{vc}_id"}>
-                <input type=hidden name="old$form->{vc}" value="$form->{"old$form->{vc}"}">
+                <input type=hidden name="select$form->{vc}" value="| . H($form->{"select$form->{vc}"}) . qq|">
+                <input type=hidden name="$form->{vc}_id" value="|    . H($form->{"$form->{vc}_id"}) . qq|">
+                <input type=hidden name="old$form->{vc}" value="|    . H($form->{"old$form->{vc}"}) . qq|">
               </tr>
               <tr valign=top>
                 <th align=right nowrap>| . $locale->text('Address') . qq|</th>