--- a/template.py	Fri Jul 20 01:37:10 2001 +0000
+++ b/template.py	Fri Jul 20 07:34:43 2001 +0000
@@ -1,6 +1,6 @@
-# $Id: template.py,v 1.4 2001-07-19 06:27:07 anthonybaxter Exp $
+# $Id: template.py,v 1.5 2001-07-20 07:34:43 richard Exp $
 
-import os, re, StringIO, urllib
+import os, re, StringIO, urllib, cgi
 
 import hyperdb, date
 
@@ -68,6 +68,9 @@
             size = size or 30
             if value is None:
                 value = ''
+            else:
+                value = cgi.escape(value)
+                value = '"'.join(value.split('"'))
             s = '<input name="%s" value="%s" size="%s">'%(property, value, size)
         elif propclass.isLinkType:
             linkcl = self.db.classes[propclass.classname]
@@ -697,6 +700,13 @@
 
 #
 # $Log: not supported by cvs2svn $
+# Revision 1.4  2001/07/19 06:27:07  anthonybaxter
+# fixing (manually) the (dollarsign)Log(dollarsign) entries caused by
+# my using the magic (dollarsign)Id(dollarsign) and (dollarsign)Log(dollarsign)
+# strings in a commit message. I'm a twonk.
+#
+# Also broke the help string in two.
+#
 # Revision 1.3  2001/07/19 05:52:22  anthonybaxter
 # Added CVS keywords Id and Log to all python files.
 #