diff --git a/htdocs/contact/fiche.php b/htdocs/contact/fiche.php index 80277c904ad..ac8ab1d2e58 100644 --- a/htdocs/contact/fiche.php +++ b/htdocs/contact/fiche.php @@ -605,11 +605,11 @@ else }); $("#copyaddressfromsoc").click(function() { - $(\'textarea[name="address"]\').text("'.addslashes($objsoc->address).'"); - $(\'input[name="zipcode"]\').val("'.addslashes($objsoc->zip).'"); - $(\'input[name="town"]\').val("'.addslashes($objsoc->town).'"); - $(\'select[name="country_id"]\').val("'.addslashes($objsoc->country_id).'"); - $(\'select[name="state_id"]\').val("'.addslashes($objsoc->state_id).'"); + $(\'textarea[name="address"]\').text("'.dol_escape_js($objsoc->address).'"); + $(\'input[name="zipcode"]\').val("'.dol_escape_js($objsoc->zip).'"); + $(\'input[name="town"]\').val("'.dol_escape_js($objsoc->town).'"); + $(\'select[name="country_id"]\').val("'.dol_escape_js($objsoc->country_id).'"); + $(\'select[name="state_id"]\').val("'.dol_escape_js($objsoc->state_id).'"); }); })'."\n"; print ''."\n";