From 9c684bee1c1947f82da7506fae5f98e809ba448a Mon Sep 17 00:00:00 2001
From: Dany De Bontridder <dany@alchimerys.be>
Date: Wed, 5 Aug 2009 21:25:23 +0000
Subject: [PATCH] Class_acc_bilan : protect XML

---
 include/class_acc_bilan.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/include/class_acc_bilan.php b/include/class_acc_bilan.php
index 4ac7fd9ba..f945943ba 100644
--- a/include/class_acc_bilan.php
+++ b/include/class_acc_bilan.php
@@ -385,6 +385,8 @@ class Acc_Bilan {
 		// htmlentities() is not the best function to deal with XML
 		// $a = htmlentities($ret[0]['acct_name'], ENT_QUOTES, "UTF-8", false);
 		$a = $ret[0]['acct_name'];
+		$a=str_replace('<','&lt;',$a);
+		$a=str_replace('>','&gt;',$a);
 	      }
 	    }
 	  } else {