Improved register_globals

pages/index/6.php

@@ -76,8 +76,8 @@
 ?>
   <tr>
     <td class="DataTD"><?=$_SESSION['lostpw']['user'][$q]?></td>
-    <td class="DataTD"><input type="text" name="<?=$a?>" value="<?=$_SESSION['lostpw'][$a]?>">
-	<input type="hidden" name="<?=$q?>" value="<?=$_SESSION['lostpw']['user'][$q]?>"></td>
+    <td class="DataTD"><input type="text" name="<?=$a?>" value="<?=sanitizeHTML(array_key_exists($a,$_SESSION['lostpw'])?$_SESSION['lostpw'][$a]:"")?>">
+	<input type="hidden" name="<?=$q?>" value="<?=sanitizeHTML($_SESSION['lostpw']['user'][$q])?>"></td>
   </tr>
 <? } ?>
   <tr>