Update user_edit.php

fusionpbx · Jul 17, 2018 · 63b7221 · 63b7221
1 parent 71d152c
commit 63b7221
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/core/users/user_edit.php b/core/users/user_edit.php
@@ -704,12 +704,12 @@
 		echo "<select name=\"contact_uuid\" id=\"contact_uuid\" class=\"formfld\">\n";
 		echo "<option value=\"\"></option>\n";
 		foreach($result as $row) {
-				$contact_name = array();
-				if ($row['contact_organization'] != '') { $contact_name[] = $row['contact_organization']; }
-				if ($row['contact_name_family'] != '') { $contact_name[] = $row['contact_name_family']; }
-				if ($row['contact_name_given'] != '') { $contact_name[] = $row['contact_name_given']; }
-				if ($row['contact_name_family'] == '' && $row['contact_name_family'] == '' && $row['contact_nickname'] != '') { $contact_name[] = $row['contact_nickname']; }
-				echo "<option value='".$row['contact_uuid']."' ".(($row['contact_uuid'] == $contact_uuid) ? "selected='selected'" : null).">".implode(', ', $contact_name)."</option>\n";
+			$contact_name = array();
+			if ($row['contact_organization'] != '') { $contact_name[] = $row['contact_organization']; }
+			if ($row['contact_name_family'] != '') { $contact_name[] = $row['contact_name_family']; }
+			if ($row['contact_name_given'] != '') { $contact_name[] = $row['contact_name_given']; }
+			if ($row['contact_name_family'] == '' && $row['contact_name_family'] == '' && $row['contact_nickname'] != '') { $contact_name[] = $row['contact_nickname']; }
+			echo "<option value='".escape($row['contact_uuid'])."' ".(($row['contact_uuid'] == $contact_uuid) ? "selected='selected'" : null).">".escape(implode(', ', $contact_name))."</option>\n";
 		}
 		unset($sql, $result, $row_count);
 		echo "</select>\n";