Fixed XSS

pages/account/33.php

@@ -18,14 +18,14 @@
 	$row = mysql_fetch_assoc(mysql_query($query));
 ?>
 <form method="post" action="account.php">
-<input type="hidden" name="orgid" value="<?=$_REQUEST['orgid']?>">
+<input type="hidden" name="orgid" value="<?=intval($_REQUEST['orgid'])?>">
 <table align="center" valign="middle" border="0" cellspacing="0" cellpadding="0" class="wrapper">
   <tr>
     <td colspan="2" class="title"><? printf(_("New Admin for %s"), $row[O]); ?></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Email")?>:</td>
-    <td class="DataTD"><input type="text" name="email" value="<?=$_SESSION['_config']['email']?>"></td>
+    <td class="DataTD"><input type="text" name="email" value="<?=sanitizeHTML($_SESSION['_config']['email'])?>"></td>
   </tr>
   <tr>
     <td class="DataTD"><?=_("Department")?>:</td>