From 2c1bab658e12f48fe824084450f4c9d02f17d4ad Mon Sep 17 00:00:00 2001
From: emanuele <emanuele45@gmail.com>
Date: Tue, 26 Jun 2012 17:38:15 +0200
Subject: [PATCH] [repair_settings] Fix the problem with double quotes in the
 mysql password reported by Arantor [Topic 480181]

Signed-off-by: emanuele <emanuele45@gmail.com>
---
 repair_settings.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/repair_settings.php b/repair_settings.php
index c9c114a..a284ce9 100644
--- a/repair_settings.php
+++ b/repair_settings.php
@@ -555,7 +555,7 @@ function restoreAll()
 			elseif ($info[1] == 'string')
 			{
 				echo '
-								<input type="text" name="', $info[0], 'settings[', $setting, ']" id="', $setting, '" value="', isset($settings[$setting]) ? $settings[$setting] : '', '" size="', $settings_section == 'path_url_settings' || $settings_section == 'theme_path_url_settings' ? '60" style="width: 80%;' : '30', '" class="input_text" />';
+								<input type="text" name="', $info[0], 'settings[', $setting, ']" id="', $setting, '" value="', isset($settings[$setting]) ? htmlspecialchars($settings[$setting]) : '', '" size="', $settings_section == 'path_url_settings' || $settings_section == 'theme_path_url_settings' ? '60" style="width: 80%;' : '30', '" class="input_text" />';
 
 				if (isset($info[2]))
 					echo '