diff --git a/api/canned/index.php b/api/canned/index.php index c9c35024..996f6274 100644 --- a/api/canned/index.php +++ b/api/canned/index.php @@ -9,9 +9,10 @@ hesk_dbConnect(); // Routing if (isset($_GET['id'])) { - $response = hesk_dbQuery("SELECT `id`, `message`, `html`, `title`, `reply_order` FROM `" + $response = hesk_dbQuery("SELECT `id`, `message`, `title`, `reply_order` FROM `" . hesk_dbEscape($hesk_settings['db_pfix']) . "std_replies` WHERE `id` = ".intval($_GET['id'])); $result = hesk_dbFetchAssoc($response); + $result['message'] = html_entity_decode($result['message']); header('Content-Type: application/json'); print json_encode($result);