[0.7.9RC3] Information description and title not correctly entered into the DB

We also need fixes similar to what we have done for category and product descriptions (both for the Insert and Update actions) in the following files:

/admin/controller/information.php on lines 45 and 85:

/catalog/controller/information.php on lines 17 and 19:

See http://code.google.com/p/open-cart/issues/detail?id=101 for more details.

hmm are you actually seeing an error for these?

I was looking at these yesterday during some code cleanup and wondered if they needed to be patched to allow html characters.

But

1. I entered a new information titled "Shipping & Returns" and saved it
2. I checked the database table and saw that it saved as "Shipping & Returns"
3. I checked the front end and found "Shipping & Returns"

So is this not correct behavior?
The same is true for categories and products

Are you looking to have the un-tampered version in the database ?

2. I checked the database table and saw that it saved as "Shipping & Returns"

No, it should store it as: "Shipping & Returns", to keep the DB contents more backward compatible. If you apply my sugested fixes, it will work fine.

Does that buy anything? I usually see the escaped version in the database on other systems (CMS, BBs, Carts, etc)
The reality is if we do it for these 2, there are 50 other fields we need to do it for. product titles, category titles, model numbers, price fields, etc

Actually i lied.. it does appear that other systems do save it unescaped as well.

We will look into the full effect of the change then.