From 4ebd643817f1dce018108ca8b145ef22b8077628 Mon Sep 17 00:00:00 2001
From: Steve Sutton <steve@gaslightmedia.com>
Date: Thu, 16 Oct 2014 12:42:09 -0400
Subject: [PATCH] for form filters

---
 GlmQuickSite.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/GlmQuickSite.php b/GlmQuickSite.php
index 3c4d0e6..41dd106 100644
--- a/GlmQuickSite.php
+++ b/GlmQuickSite.php
@@ -233,7 +233,8 @@ function glmQuickSiteRenderText($fieldName) {
         $options = get_option( 'glmQuickSite_settings' );
     }
 ?>
-    <input type='text' name='glmQuickSite_settings[<?php echo $fieldName;?>]' value='<?php echo $options[$fieldName]; ?>'>
+    <input type="text" name="glmQuickSite_settings[<?php echo $fieldName;?>]"
+           value="<?php echo strp_replace('"', '&quote;', $options[$fieldName]); ?>">
 <?php
 }
 
@@ -241,7 +242,7 @@ function glmQuickSiteRenderTextArea($fieldName) {
     static $options;
     $options = get_option( 'glmQuickSite_settings' );
 ?>
-    <textarea cols='40' rows='5' name='glmQuickSite_settings[<?php echo $fieldName;?>]'><?php echo $options[$fieldName]; ?></textarea>
+    <textarea cols="40" rows="5" name="glmQuickSite_settings[<?php echo $fieldName;?>]"><?php echo htmlspecialchars($options[$fieldName]); ?></textarea>
 <?php
 }
 
-- 
2.17.1