Index: trunk/admin/users/adduser_custom.php
===================================================================
diff -u -N -r624 -r738
--- trunk/admin/users/adduser_custom.php	(.../adduser_custom.php)	(revision 624)
+++ trunk/admin/users/adduser_custom.php	(.../adduser_custom.php)	(revision 738)
@@ -167,7 +167,7 @@
       
       if(is_object($f))
       {
-        $val_field = "<input type=\"text\" tabindex=\"".($i+1)."\" VALUE=\"".$f->Get("Value")."\" name=\"$fieldname\">";
+        $val_field = "<input type=\"text\" tabindex=\"".($i+1)."\" VALUE=\"".inp_htmlize($f->Get("Value"))."\" name=\"$fieldname\">";
         $field->Set("Value", $val_field);
         $field->Set("DataId",$f->Get("CustomDataId"));
       }