From 2d1123b689f2b275907f41db46c258dbb5045711 Mon Sep 17 00:00:00 2001
From: John Horne <john.horne@plymouth.ac.uk>
Date: Thu, 7 Sep 2017 16:34:25 +0100
Subject: [PATCH] In the admin UI do not interpret HTML characters in the admin
 password.

---
 website_code/php/management/site.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/website_code/php/management/site.php b/website_code/php/management/site.php
index f457a00820..48ace893f2 100644
--- a/website_code/php/management/site.php
+++ b/website_code/php/management/site.php
@@ -102,7 +102,7 @@
     echo "<p>" . MANAGEMENT_SITE_ADMIN_USER . "<form><textarea id=\"admin_username\">" . $row['admin_username'] . "</textarea></form>
         </p>";	
 
-    echo "<p>" . MANAGEMENT_SITE_ADMIN_PASSWORD . "<form><textarea id=\"admin_password\">" . $row['admin_password'] . "</textarea></form>
+    echo "<p>" . MANAGEMENT_SITE_ADMIN_PASSWORD . "<form><textarea id=\"admin_password\">" . htmlspecialchars($row['admin_password']) . "</textarea></form>
         </p>";	
 
     echo "</div>";