amend previous to fix actual underlying problem (double escaping)

1 files changed, 1 insertions, 1 deletions

diff --git a/include/controls.php b/include/controls.php
index 6d3cfc417..b351a9449 100755
--- a/include/controls.php
+++ b/include/controls.php
@@ -61,7 +61,7 @@
 
    function hidden_tag(string $name, string $value) {
       return "<input dojoType=\"dijit.form.TextBox\" style=\"display : none\"
-         name=\"".htmlspecialchars($name)."\" value=\"$value\">";
+         name=\"".htmlspecialchars($name)."\" value=\"".htmlspecialchars($value)."\">";
    }
 
    function checkbox_tag(string $name, bool $checked = false, string $value = "", string $attributes = "", string $id = "") {