diff --git a/main/admin/settings.lib.php b/main/admin/settings.lib.php index b8e5adbeb8..3882483796 100755 --- a/main/admin/settings.lib.php +++ b/main/admin/settings.lib.php @@ -1000,6 +1000,7 @@ function add_edit_template() { $form->addButtonSave(get_lang('Ok'), 'submit'); // Setting the rules: the required fields. + $form->addRule('template_image', get_lang('ThisFieldIsRequired'), 'required'); $form->addRule('title', get_lang('ThisFieldIsRequired'), 'required'); $form->addRule('template_text', get_lang('ThisFieldIsRequired'), 'required'); @@ -1042,7 +1043,7 @@ function add_edit_template() { // Store the information in the database (as insert or as update). $table_system_template = Database :: get_main_table('system_template'); if ($_GET['action'] == 'add') { - $content_template = '{CSS}'.Database::escape_string($values['template_text']).''; + $content_template = Security::remove_XSS($values['template_text'], COURSEMANAGERLOWSECURITY); $params = [ 'title' => $values['title'], 'content' => $content_template,