diff --git a/htdocs/contact/list.php b/htdocs/contact/list.php
index 0bb902f7ca1..d41b6829bb2 100644
--- a/htdocs/contact/list.php
+++ b/htdocs/contact/list.php
@@ -1072,7 +1072,7 @@ while ($i < min($num, $limit)) {
// ID
if (!empty($arrayfields['p.rowid']['checked'])) {
print '
';
- print $obj->rowid;
+ print dol_escape_htmltag($obj->rowid);
print " | \n";
if (!$i) {
$totalarray['nbfield']++;
@@ -1080,7 +1080,7 @@ while ($i < min($num, $limit)) {
}
// Name
if (!empty($arrayfields['p.lastname']['checked'])) {
- print '';
+ print ' | ';
print $contactstatic->getNomUrl(1);
print ' | ';
if (!$i) {
@@ -1089,35 +1089,35 @@ while ($i < min($num, $limit)) {
}
// Firstname
if (!empty($arrayfields['p.firstname']['checked'])) {
- print ''.$obj->firstname.' | ';
+ print ''.dol_escape_htmltag($obj->firstname).' | ';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Job position
if (!empty($arrayfields['p.poste']['checked'])) {
- print ''.$obj->poste.' | ';
+ print ''.dol_escape_htmltag($obj->poste).' | ';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Address
if (!empty($arrayfields['p.address']['checked'])) {
- print ''.$obj->address.' | ';
+ print ''.dol_escape_htmltag($obj->address).' | ';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Zip
if (!empty($arrayfields['p.zip']['checked'])) {
- print ''.$obj->zip.' | ';
+ print ''.dol_escape_htmltag($obj->zip).' | ';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Town
if (!empty($arrayfields['p.town']['checked'])) {
- print ''.$obj->town.' | ';
+ print ''.dol_escape_htmltag($obj->town).' | ';
if (!$i) {
$totalarray['nbfield']++;
}
@@ -1138,7 +1138,7 @@ while ($i < min($num, $limit)) {
if (!empty($arrayfields['country.code_iso']['checked'])) {
print '';
$tmparray = getCountry($obj->fk_pays, 'all');
- print $tmparray['label'];
+ print dol_escape_htmltag($tmparray['label']);
print ' | ';
if (!$i) {
$totalarray['nbfield']++;
@@ -1195,7 +1195,7 @@ while ($i < min($num, $limit)) {
if (!empty($conf->socialnetworks->enabled)) {
foreach ($socialnetworks as $key => $value) {
if ($value['active'] && !empty($arrayfields['p.'.$key]['checked'])) {
- print ''.dol_print_socialnetworks($arraysocialnetworks[$key], $obj->rowid, $obj->socid, $key, $socialnetworks).' | ';
+ print ''.dol_print_socialnetworks($arraysocialnetworks[$key], $obj->rowid, $obj->socid, $key, $socialnetworks).' | ';
if (!$i) {
$totalarray['nbfield']++;
}
@@ -1264,7 +1264,7 @@ while ($i < min($num, $limit)) {
print $hookmanager->resPrint;
// Date creation
if (!empty($arrayfields['p.datec']['checked'])) {
- print '';
+ print ' | ';
print dol_print_date($db->jdate($obj->date_creation), 'dayhour', 'tzuser');
print ' | ';
if (!$i) {
@@ -1273,7 +1273,7 @@ while ($i < min($num, $limit)) {
}
// Date modification
if (!empty($arrayfields['p.tms']['checked'])) {
- print '';
+ print ' | ';
print dol_print_date($db->jdate($obj->date_update), 'dayhour', 'tzuser');
print ' | ';
if (!$i) {