From c447099bda5b716ad4d8f5771fc1b3f7d5c3becf Mon Sep 17 00:00:00 2001
From: gbateson <gbateson>
Date: Sat, 26 Jan 2008 08:26:38 +0000
Subject: [PATCH] fix for MDL-13173: quotes in HotPot activity name

---
 mod/hotpot/mod.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/hotpot/mod.html b/mod/hotpot/mod.html
index 5342adeff38..a588d727444 100644
--- a/mod/hotpot/mod.html
+++ b/mod/hotpot/mod.html
@@ -77,7 +77,7 @@ $text_source_options = array(
             } else {
                 print '<input type="hidden" name="namesource" value="'.HOTPOT_TEXTSOURCE_SPECIFIC.'" />';
             }
-            print '<input type="text" name="name" size="40" value="'.$form->name.'" />';
+            print '<input type="text" name="name" size="40" value="'.htmlspecialchars($form->name).'" />';
         ?></td>
     </tr>
     <tr valign="top">