X-Git-Url: https://git.tokkee.org/?a=blobdiff_plain;f=gosa-core%2Finclude%2Fclass_MultiSelectWindow.inc;h=9c9bd5071763836acd638b6201d0f0a983b95fd5;hb=67253c858b7c867ee5fa3a9b4bbfde1fc1ee81d1;hp=5e4181c4a8540a512a44c11afe81306137c9223a;hpb=95c57584f97795cf04c71a4fe93c5476a897838f;p=gosa.git

diff --git a/gosa-core/include/class_MultiSelectWindow.inc b/gosa-core/include/class_MultiSelectWindow.inc
index 5e4181c4a..9c9bd5071 100644
--- a/gosa-core/include/class_MultiSelectWindow.inc
+++ b/gosa-core/include/class_MultiSelectWindow.inc
@@ -531,7 +531,7 @@ class MultiSelectWindow{
 
     /* Save base selection from headpage selectbox */
     if(isset($_POST['CurrentMainBase'])){
-      $this->selectedBase = $_POST['CurrentMainBase'];
+      $this->selectedBase = get_post('CurrentMainBase');
       session::global_set("CurrentMainBase", $this->selectedBase);
     } else {
       $this->selectedBase= session::global_get("CurrentMainBase");
@@ -775,11 +775,13 @@ class MultiSelectWindow{
         $first = $value;
       }
 
+
+      $v_value = htmlentities($value,ENT_QUOTES);
       if ($this->selectedBase == $value){
         $found = TRUE;
-        $options.= "<option selected='selected' value='".$value."'>$name</option>";
+        $options.= "<option selected='selected' value=\"".$v_value."\">$name</option>";
       } else {
-        $options.= "<option value='".$value."'>$name</option>";
+        $options.= "<option value=\"".$v_value."\">$name</option>";
       }
     }