X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~yarrgweb/git?a=blobdiff_plain;f=yarrg%2Fweb%2Froutetrade;h=01b15d9036ca80acc2a8d0424a00250668bc223d;hb=b5cdb0d90df8dde3653e2a1d8d2c3e1c2d04af3e;hp=b51a3a06eb4810c7dc920a69a072dbc6d84352b1;hpb=ca4f2a1a8f85d4dbd1c85250f95c6980d6bf9f3a;p=ypp-sc-tools.db-test.git

diff --git a/yarrg/web/routetrade b/yarrg/web/routetrade
index b51a3a0..01b15d9 100644
--- a/yarrg/web/routetrade
+++ b/yarrg/web/routetrade
@@ -896,7 +896,7 @@ END
 		$linkqf{'query'}= 'commod';
 		$linkqf{'commodstring'}= $t->{'commodname'};
 		$linkqf{'commodid'}= $t->{'commodid'};
-		my $linkqfpr= $quri->(%linkqf);
+		my $linkqfpr= encode_entities( $quri->(%linkqf) );
 		my $commodnamepr= encode_entities($t->{'commodname'});
 		$plan_html .= tr_datarow_s($m,$dline) . <<END;
 <$td>$collectdeliver
@@ -918,7 +918,7 @@ END
 <$td align=right>$t->{Total} total
 END
 		foreach my $stallix (1..$#stalls) {
-			tr_datarow_s($m,$dline);
+			$plan_html .= tr_datarow_s($m,$dline);
 			$pstall->($stallix);
 		}