From 41eb9e6a7b5813b1d374a5248868300bf14fce01 Mon Sep 17 00:00:00 2001
From: shish <shish@7f39781d-f577-437e-ae19-be835c7a54ca>
Date: Mon, 1 Sep 2008 13:22:56 +0000
Subject: [PATCH] and 2.2

git-svn-id: file:///home/shish/svn/shimmie2/branches/branch_2.2@1014 7f39781d-f577-437e-ae19-be835c7a54ca
---
 ext/setup/main.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/ext/setup/main.php b/ext/setup/main.php
index b2482d45..b4b2580f 100644
--- a/ext/setup/main.php
+++ b/ext/setup/main.php
@@ -46,7 +46,7 @@ class SetupBlock extends Block {
 
 	public function add_text_option($name, $label=null) {
 		global $config;
-		$val = $config->get_string($name);
+		$val = html_escape($config->get_string($name));
 		if(!is_null($label)) {
 			$this->body .= "<label for='$name'>$label</label>";
 		}
@@ -56,7 +56,7 @@ class SetupBlock extends Block {
 
 	public function add_longtext_option($name, $label=null) {
 		global $config;
-		$val = $config->get_string($name);
+		$val = html_escape($config->get_string($name));
 		if(!is_null($label)) {
 			$this->body .= "<label for='$name'>$label</label>";
 		}
@@ -83,7 +83,7 @@ class SetupBlock extends Block {
 
 	public function add_int_option($name, $label=null) {
 		global $config;
-		$val = $config->get_string($name);
+		$val = html_escape($config->get_string($name));
 		if(!is_null($label)) {
 			$this->body .= "<label for='$name'>$label</label>";
 		}