From 832523a5d2367c230e548b5721fc0e984d3446f8 Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Sat, 30 Jun 2018 11:26:27 -0600
Subject: [PATCH] Update conference_centers.php

---
 app/conference_centers/conference_centers.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/conference_centers/conference_centers.php b/app/conference_centers/conference_centers.php
index 1e9abd8704..b7a339802d 100644
--- a/app/conference_centers/conference_centers.php
+++ b/app/conference_centers/conference_centers.php
@@ -108,7 +108,7 @@
 	echo "		<td width='50%' align='left' nowrap='nowrap'><b>".$text['title-conference_centers']."</b></td>\n";
 	echo "		<form method='get' action=''>\n";
 	echo "			<td width='50%' style='vertical-align: top; text-align: right; white-space: nowrap;'>\n";
-	echo "				<input type='text' class='txt' style='width: 150px' name='search' id='search' value='".$search."'>\n";
+	echo "				<input type='text' class='txt' style='width: 150px' name='search' id='search' value='".escape($search)."'>\n";
 	echo "				<input type='submit' class='btn' name='submit' value='".$text['button-search']."'>\n";
 	if (permission_exists('conference_active_advanced_view')) {
 		echo "				<input type='button' class='btn' name='' alt='".$text['button-view']."' onclick=\"window.location='".PROJECT_PATH."/app/conferences_active/conferences_active.php'\" value='".$text['button-view']."'>\n";