Bug: Product Type Parameter form

[doorknob]

The Product Type Parameter form does not escape value for the Possible Values and Default Values fields. Special characters like quotes cause problems.
I made the following changes to resolve the problem:
line 136 changed from

Code Select Expand

        <input type="text" class="inputbox" name="parameter_values" size="60" value="<?php $db->sp('parameter_values') ?>" />

to

Code Select Expand

        <input type="text" class="inputbox" name="parameter_values" size="60" value="<?php echo shopMakeHtmlSafe( $db->sf('parameter_values') ) ?>" />

and line 148 changed from

Code Select Expand

        <input type="text" class="inputbox" name="parameter_default" size="60" value="<?php $db->sp('parameter_default') ?>" />

to

Code Select Expand

        <input type="text" class="inputbox" name="parameter_default" size="60" value="<?php echo shopMakeHtmlSafe( $db->sf('parameter_default') ) ?>" />


Regards
Phil

[vbarkouski]

file to modify:

product.product_type_parameter_form.php