From 34211d2356367e21aa8f624caa7b17ee4b8ec4ac Mon Sep 17 00:00:00 2001
From: =?utf8?q?Sven=20Sch=C3=B6ling?= <s.schoeling@linet-services.de>
Date: Tue, 13 Oct 2009 16:41:42 +0200
Subject: [PATCH] Einkaufsrechnungen: Lieferanten richtig escapen.
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

Fix für Bug 1201
---
 bin/mozilla/ap.pl | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/bin/mozilla/ap.pl b/bin/mozilla/ap.pl
index f88229309..c33c913cb 100644
--- a/bin/mozilla/ap.pl
+++ b/bin/mozilla/ap.pl
@@ -428,10 +428,10 @@ selectvendor } </select>|
 	      <tr>
 		<th align=right nowrap>| . $locale->text('Vendor') . qq|</th>
 		<td colspan=3>$vendor <input type="button" value="D" onclick="show_vc_details('vendor')"></td>
-		<input type=hidden name=selectvendor value="$form->{selectvendor}">
-		<input type=hidden name=oldvendor value="$form->{oldvendor}">
-		<input type=hidden name=vendor_id value="$form->{vendor_id}">
-		<input type=hidden name=terms value=$form->{terms}>
+		<input type=hidden name=selectvendor value="| . H($form->{selectvendor}) . qq|">
+		<input type=hidden name=oldvendor value="| . H($form->{oldvendor}) . qq|">
+		<input type=hidden name=vendor_id value="| . H($form->{vendor_id}) . qq|">
+		<input type=hidden name=terms value="| . H($form->{terms}) . qq|">
 	      </tr>
 	      <tr>
 	        <td></td>
-- 
2.20.1