Merge pull request #1348 from bthorben/patch-1

Escape special chars in product name and model
opencart · Apr 17, 2014 · 274ad83 · 274ad83
2 parents 81fab2e + 92ee3fd
commit 274ad83
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/upload/catalog/controller/payment/pp_standard.php b/upload/catalog/controller/payment/pp_standard.php
@@ -43,8 +43,8 @@ public function index() {
 				}
 
 				$data['products'][] = array(
-					'name'     => $product['name'],
-					'model'    => $product['model'],
+					'name'     => htmlspecialchars($product['name']),
+					'model'    => htmlspecialchars($product['model']),
 					'price'    => $this->currency->format($product['price'], $order_info['currency_code'], false, false),
 					'quantity' => $product['quantity'],
 					'option'   => $option_data,
@@ -194,4 +194,4 @@ public function callback() {
 			curl_close($curl);
 		}	
 	}
-}
+}