From 9643f34183ae400702574b3103e774e9e2a9cf66 Mon Sep 17 00:00:00 2001
From: Frederick Behrends <frederick.behrends@gmail.com>
Date: Sat, 14 Dec 2013 14:53:30 +0100
Subject: [PATCH] Escaping values in Admin Setting Panel to prevent html to
 break the form.

---
 public/templates/mpos/admin/settings/default.tpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/public/templates/mpos/admin/settings/default.tpl b/public/templates/mpos/admin/settings/default.tpl
index a4c4d5c0..7ab60aed 100644
--- a/public/templates/mpos/admin/settings/default.tpl
+++ b/public/templates/mpos/admin/settings/default.tpl
@@ -21,7 +21,7 @@
           {if $SETTINGS.$TAB[setting].type == 'select'}
             {html_options name="data[{$SETTINGS.$TAB[setting].name}]" options=$SETTINGS.$TAB[setting].options selected=$SETTINGS.$TAB[setting].value|default:$SETTINGS.$TAB[setting].default}
           {else if $SETTINGS.$TAB[setting].type == 'text'}
-            <input type="text" size="{$SETTINGS.$TAB[setting].size}" name="data[{$SETTINGS.$TAB[setting].name}]" value="{$SETTINGS.$TAB[setting].value|default:$SETTINGS.$TAB[setting].default}" />
+            <input type="text" size="{$SETTINGS.$TAB[setting].size}" name="data[{$SETTINGS.$TAB[setting].name}]" value="{$SETTINGS.$TAB[setting].value|default:$SETTINGS.$TAB[setting].default|escape:"html"}" />
           {else if $SETTINGS.$TAB[setting].type == 'textarea'}
           	<textarea name="data[{$SETTINGS.$TAB[setting].name}]" cols="{$SETTINGS.$TAB[setting].size|default:"1"}" rows="{$SETTINGS.$TAB[setting].height|default:"1"}">{$SETTINGS.$TAB[setting].value|default:$SETTINGS.$TAB[setting].default}</textarea>
           {else}