The Product Type Parameter form does not escape value for the Possible Values and Default Values fields. Special characters like quotes cause problems.
I made the following changes to resolve the problem:
line 136 changed from
<input type="text" class="inputbox" name="parameter_values" size="60" value="<?php $db->sp('parameter_values') ?>" />
to
<input type="text" class="inputbox" name="parameter_values" size="60" value="<?php echo shopMakeHtmlSafe( $db->sf('parameter_values') ) ?>" />
and line 148 changed from
<input type="text" class="inputbox" name="parameter_default" size="60" value="<?php $db->sp('parameter_default') ?>" />
to
<input type="text" class="inputbox" name="parameter_default" size="60" value="<?php echo shopMakeHtmlSafe( $db->sf('parameter_default') ) ?>" />
Regards
Phil
file to modify:
product.product_type_parameter_form.php