--- rat/lonpage.pm	2002/03/26 16:14:51	1.34
+++ rat/lonpage.pm	2002/03/28 21:47:48	1.36
@@ -1,7 +1,7 @@
 # The LearningOnline Network with CAPA
 # Page Handler
 #
-# $Id: lonpage.pm,v 1.34 2002/03/26 16:14:51 www Exp $
+# $Id: lonpage.pm,v 1.36 2002/03/28 21:47:48 www Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -376,7 +376,8 @@ sub handler {
                                     $metalink{$rid}.'" target="LONcatInfo">'.
                           '<img src="/adm/lonMisc/cat_button.gif" border=0>'.
 			  '</img></a><a href="/adm/evaluate?postdata='.
-      &Apache::lonnet::declutter($hash{'src_'.$rid}).'" target="LONcatInfo">'.
+      &Apache::lonnet::escape(&Apache::lonnet::declutter($hash{'src_'.$rid}))
+      .'" target="LONcatInfo">'.
                           '<img src="/adm/lonMisc/eval_button.gif" border=0>'.
                           '</img></a>';
                               if (
@@ -388,15 +389,16 @@ sub handler {
                 '___'.$resid.'___'.
 		&Apache::lonnet::declutter($hash{'src_'.$rid});
                                  $metainfo.=
-                  '<a href="/adm/grades?symb='.$symb.
+                  '<a href="/adm/grades?symb='.&Apache::lonnet::escape($symb).
                   '&command=submission" target="LONcatInfo">'.
                           '<img src="/adm/lonMisc/subm_button.gif" border=0>'.
 			  '</img></a>'.
-                  '<a href="/adm/grades?symb='.$symb.
+                  '<a href="/adm/grades?symb='.&Apache::lonnet::escape($symb).
                   '&command=viewgrades" target="LONcatInfo">'.
                           '<img src="/adm/lonMisc/pgrd_button.gif" border=0>'.
 			  '</img></a>'.
-                  '<a href="/adm/parmset?symb='.$symb.'" target="LONcatInfo">'.
+                  '<a href="/adm/parmset?symb='.&Apache::lonnet::escape($symb).
+                          '" target="LONcatInfo">'.
                           '<img src="/adm/lonMisc/pprm_button.gif" border=0>'.
 			      '</img></a>';
                               }