diff --git a/htdocs/contact/list.php b/htdocs/contact/list.php
index 1070c9e0b9d..59e57d03a60 100644
--- a/htdocs/contact/list.php
+++ b/htdocs/contact/list.php
@@ -1099,7 +1099,7 @@ while ($i < min($num, $limit)) {
// ID
if (!empty($arrayfields['p.rowid']['checked'])) {
print '
';
- print $obj->rowid;
+ print dol_escape_htmltag($obj->rowid);
print " | \n";
if (!$i) {
$totalarray['nbfield']++;
@@ -1107,7 +1107,7 @@ while ($i < min($num, $limit)) {
}
// Name
if (!empty($arrayfields['p.lastname']['checked'])) {
- print '';
+ print ' | ';
print $contactstatic->getNomUrl(1);
print ' | ';
if (!$i) {
@@ -1116,35 +1116,35 @@ while ($i < min($num, $limit)) {
}
// Firstname
if (!empty($arrayfields['p.firstname']['checked'])) {
- print ''.$obj->firstname.' | ';
+ print ''.dol_escape_htmltag($obj->firstname).' | ';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Job position
if (!empty($arrayfields['p.poste']['checked'])) {
- print ''.$obj->poste.' | ';
+ print ''.dol_escape_htmltag($obj->poste).' | ';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Address
if (!empty($arrayfields['p.address']['checked'])) {
- print ''.$obj->address.' | ';
+ print ''.dol_escape_htmltag($obj->address).' | ';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Zip
if (!empty($arrayfields['p.zip']['checked'])) {
- print ''.$obj->zip.' | ';
+ print ''.dol_escape_htmltag($obj->zip).' | ';
if (!$i) {
$totalarray['nbfield']++;
}
}
// Town
if (!empty($arrayfields['p.town']['checked'])) {
- print ''.$obj->town.' | ';
+ print ''.dol_escape_htmltag($obj->town).' | ';
if (!$i) {
$totalarray['nbfield']++;
}
@@ -1165,7 +1165,7 @@ while ($i < min($num, $limit)) {
if (!empty($arrayfields['country.code_iso']['checked'])) {
print '';
$tmparray = getCountry($obj->fk_pays, 'all');
- print $tmparray['label'];
+ print dol_escape_htmltag($tmparray['label']);
print ' | ';
if (!$i) {
$totalarray['nbfield']++;
@@ -1222,7 +1222,7 @@ while ($i < min($num, $limit)) {
if (isModEnabled('socialnetworks')) {
foreach ($socialnetworks as $key => $value) {
if ($value['active'] && !empty($arrayfields['p.'.$key]['checked'])) {
- print ''.dol_print_socialnetworks($arraysocialnetworks[$key], $obj->rowid, $obj->socid, $key, $socialnetworks).' | ';
+ print ''.dol_print_socialnetworks($arraysocialnetworks[$key], $obj->rowid, $obj->socid, $key, $socialnetworks).' | ';
if (!$i) {
$totalarray['nbfield']++;
}
@@ -1291,7 +1291,7 @@ while ($i < min($num, $limit)) {
print $hookmanager->resPrint;
// Date creation
if (!empty($arrayfields['p.datec']['checked'])) {
- print '';
+ print ' | ';
print dol_print_date($db->jdate($obj->date_creation), 'dayhour', 'tzuser');
print ' | ';
if (!$i) {
@@ -1300,7 +1300,7 @@ while ($i < min($num, $limit)) {
}
// Date modification
if (!empty($arrayfields['p.tms']['checked'])) {
- print '';
+ print ' | ';
print dol_print_date($db->jdate($obj->date_update), 'dayhour', 'tzuser');
print ' | ';
if (!$i) {