@@ -, +, @@ xx - is a basketno xx - is a basketno. --- acqui/basket.pl | 2 ++ 1 file changed, 2 insertions(+) --- a/acqui/basket.pl +++ a/acqui/basket.pl @@ -21,6 +21,7 @@ # along with Koha; if not, see . use Modern::Perl; +use HTML::Entities; use C4::Auth; use C4::Koha; use C4::Output; @@ -72,6 +73,7 @@ the supplier this script have to display the basket. our $query = new CGI; our $basketno = $query->param('basketno'); +$basketno = HTML::Entities::encode($basketno); our $ean = $query->param('ean'); our $booksellerid = $query->param('booksellerid'); my $duplinbatch = $query->param('duplinbatch'); --