diff --git a/htdocs/contact/list.php b/htdocs/contact/list.php index 1070c9e0b9d..59e57d03a60 100644 --- a/htdocs/contact/list.php +++ b/htdocs/contact/list.php @@ -1099,7 +1099,7 @@ while ($i < min($num, $limit)) { // ID if (!empty($arrayfields['p.rowid']['checked'])) { print ''; - print $obj->rowid; + print dol_escape_htmltag($obj->rowid); print "\n"; if (!$i) { $totalarray['nbfield']++; @@ -1107,7 +1107,7 @@ while ($i < min($num, $limit)) { } // Name if (!empty($arrayfields['p.lastname']['checked'])) { - print ''; + print ''; print $contactstatic->getNomUrl(1); print ''; if (!$i) { @@ -1116,35 +1116,35 @@ while ($i < min($num, $limit)) { } // Firstname if (!empty($arrayfields['p.firstname']['checked'])) { - print ''.$obj->firstname.''; + print ''.dol_escape_htmltag($obj->firstname).''; if (!$i) { $totalarray['nbfield']++; } } // Job position if (!empty($arrayfields['p.poste']['checked'])) { - print ''.$obj->poste.''; + print ''.dol_escape_htmltag($obj->poste).''; if (!$i) { $totalarray['nbfield']++; } } // Address if (!empty($arrayfields['p.address']['checked'])) { - print ''.$obj->address.''; + print ''.dol_escape_htmltag($obj->address).''; if (!$i) { $totalarray['nbfield']++; } } // Zip if (!empty($arrayfields['p.zip']['checked'])) { - print ''.$obj->zip.''; + print ''.dol_escape_htmltag($obj->zip).''; if (!$i) { $totalarray['nbfield']++; } } // Town if (!empty($arrayfields['p.town']['checked'])) { - print ''.$obj->town.''; + print ''.dol_escape_htmltag($obj->town).''; if (!$i) { $totalarray['nbfield']++; } @@ -1165,7 +1165,7 @@ while ($i < min($num, $limit)) { if (!empty($arrayfields['country.code_iso']['checked'])) { print ''; $tmparray = getCountry($obj->fk_pays, 'all'); - print $tmparray['label']; + print dol_escape_htmltag($tmparray['label']); print ''; if (!$i) { $totalarray['nbfield']++; @@ -1222,7 +1222,7 @@ while ($i < min($num, $limit)) { if (isModEnabled('socialnetworks')) { foreach ($socialnetworks as $key => $value) { if ($value['active'] && !empty($arrayfields['p.'.$key]['checked'])) { - print ''.dol_print_socialnetworks($arraysocialnetworks[$key], $obj->rowid, $obj->socid, $key, $socialnetworks).''; + print ''.dol_print_socialnetworks($arraysocialnetworks[$key], $obj->rowid, $obj->socid, $key, $socialnetworks).''; if (!$i) { $totalarray['nbfield']++; } @@ -1291,7 +1291,7 @@ while ($i < min($num, $limit)) { print $hookmanager->resPrint; // Date creation if (!empty($arrayfields['p.datec']['checked'])) { - print ''; + print ''; print dol_print_date($db->jdate($obj->date_creation), 'dayhour', 'tzuser'); print ''; if (!$i) { @@ -1300,7 +1300,7 @@ while ($i < min($num, $limit)) { } // Date modification if (!empty($arrayfields['p.tms']['checked'])) { - print ''; + print ''; print dol_print_date($db->jdate($obj->date_update), 'dayhour', 'tzuser'); print ''; if (!$i) {