Index: /home/johnny/public_html/phpbms/modules/base/adminsettings.php
===================================================================
--- /home/johnny/public_html/phpbms/modules/base/adminsettings.php	(revision 96)
+++ /home/johnny/public_html/phpbms/modules/base/adminsettings.php	(working copy)
@@ -101,19 +101,19 @@
 		<legend>company</legend>
 		<label for="scompany_name">
 			company name<br />
-			<input id="scompany_name" name="scompany_name" type="text" size="40" maxlength="128" value="<?php echo htmlQuotes($_SESSION["company_name"]) ?>" />
+			<input id="scompany_name" name="scompany_name" type="text" size="40" maxlength="128" value="<?php echo stripslashes(htmlQuotes($_SESSION["company_name"])) ?>" />
 		</label>
 		<label for="scompany_address">
 			address<br />
-			<input id="scompany_address" name="scompany_address" type="text" value="<?php echo htmlQuotes($_SESSION["company_address"]) ?>" size="40" maxlength="128" />
+			<input id="scompany_address" name="scompany_address" type="text" value="<?php echo stripslashes(htmlQuotes($_SESSION["company_address"])) ?>" size="40" maxlength="128" />
 		</label>
 		<label for="scompany_csz">
 			city, state/province and zip/postal code<br />
-			<input id="scompany_csz" name="scompany_csz" type="text" size="40" maxlength="128"  value="<?php echo htmlQuotes($_SESSION["company_csz"]) ?>" />
+			<input id="scompany_csz" name="scompany_csz" type="text" size="40" maxlength="128"  value="<?php echo stripslashes(htmlQuotes($_SESSION["company_csz"])) ?>" />
 		</label>
 		<label for="scompany_phone">
 			phone number<br />
-			<input id="scompany_phone" name="scompany_phone" type="text" value="<?php echo htmlQuotes($_SESSION["company_phone"]) ?>" size="40" maxlength="128" />
+			<input id="scompany_phone" name="scompany_phone" type="text" value="<?php echo stripslashes(htmlQuotes($_SESSION["company_phone"])) ?>" size="40" maxlength="128" />
 		</label>
 	</fieldset>