diff --git a/main/admin/settings.php b/main/admin/settings.php
index f73bf164a8..a3210c1219 100644
--- a/main/admin/settings.php
+++ b/main/admin/settings.php
@@ -1,4 +1,4 @@
-<?php // $Id: settings.php 20441 2009-05-10 07:39:15Z ivantcholakov $
+<?php // $Id: settings.php 20508 2009-05-11 22:14:38Z juliomontoya $
 /*
 ==============================================================================
 	Dokeos - elearning and course management software
@@ -619,7 +619,7 @@ function handle_stylesheets()
 	// Preview of the stylesheet
 	echo '<div><iframe src="style_preview.php" width="100%" height="300" name="preview"></iframe></div>';
 
-	echo '<form name="stylesheets" method="post" action="'.api_get_self().'?category='.$_GET['category'].'">';
+	echo '<form name="stylesheets" method="post" action="'.api_get_self().'?category='.Security::remove_XSS($_GET['category']).'">';
 	if ($handle = @opendir(api_get_path(SYS_PATH).'main/css/'))
 	{
 		$counter=1;
@@ -642,7 +642,7 @@ function handle_stylesheets()
 					{
 						$selected = '';
 					}
-					$show_name=get_lang($style_dir, '');
+					$show_name=ucwords(str_replace('_',' ', $style_dir));
 					
 					if ($is_style_changeable)
 					{					
diff --git a/main/admin/style_preview.php b/main/admin/style_preview.php
index 8248b0939e..7c2928dbab 100644
--- a/main/admin/style_preview.php
+++ b/main/admin/style_preview.php
@@ -33,8 +33,7 @@ include(api_get_path(INCLUDE_PATH).'banner.inc.php');
         <td>
         <table>
             <tr>
-              <td width="220">
-              
+              <td width="220">              
               <table id="smallcalendar">
                   <tr id="title">
                     <td width="10%"><a href="#"><<</a></td>
@@ -118,25 +117,21 @@ include(api_get_path(INCLUDE_PATH).'banner.inc.php');
           </table>
           <table class="data_table" width="100%">
             <tr>
-              <th style="width:100px"><a href="#">firstname</a>&nbsp;&#8595; </th>
-              <th style="width:100px"><a href="#">lastname</a></th>
+              <th style="width:100px"><a href="#">Firstname</a>&nbsp;&#8595; </th>
+              <th style="width:100px"><a href="#">Lastname</a></th>
             </tr>
             <tr class="row_even">
               <td >Firstname</td>
               <td >Lastname</td>
             </tr>
             <tr class="row_odd">
-              <td >Patrick</td>
-              <td >Cool</td>
+              <td >Julio</td>
+              <td >Montoya</td>
             </tr>
             <tr class="row_even">
               <td >Patrick</td>
               <td >Cool</td>
             </tr>
-            <tr class="row_odd">
-              <td >Patrick</td>
-              <td >Cool</td>
-            </tr>
           </table>
           <table width="100%">
             <tr>
@@ -154,7 +149,7 @@ include(api_get_path(INCLUDE_PATH).'banner.inc.php');
       <input type="text" name="login" id="login" size="15" value="" />
       <label>Password</label>
       <input type="password" name="password" id="password" size="15" />
-      <input type="submit" value="OK" name="submitAuth" class="submitauth"/>
+  	  <button class="login" type="submit" name="submitAuth">Enter</button>
     </form>
     <div class="menusection"><span class="menusectioncaption">User</span>
       <ul class="menulist">