762c762 < echo "" . $record[$value] . ""; --- > echo "" . htmlentities($record[$value], ENT_QUOTES) . "";