- <input type="hidden" name="login" value="<TMPL_VAR login ESCAPE=HTML>">
- <input type="hidden" name="password" value="<TMPL_VAR password ESCAPE=HTML>">
+ <input type="hidden" name="login" value="[% HTML.escape(login) %]">
+ <input type="hidden" name="password" value="[% HTML.escape(password) %]">
<input class="submit" type="submit" name="action" value="<translate>GL Transaction</translate>">
<input class="submit" type="submit" name="action" value="<translate>AR Transaction</translate>">
<input class="submit" type="submit" name="action" value="<translate>GL Transaction</translate>">
<input class="submit" type="submit" name="action" value="<translate>AR Transaction</translate>">