diff --git a/classes/pref/filters.php b/classes/pref/filters.php
index c80a10c64..c83299678 100755
--- a/classes/pref/filters.php
+++ b/classes/pref/filters.php
@@ -717,7 +717,7 @@ class Pref_Filters extends Handler_Protected {
 
 					<div style='float : right; padding-right : 4px;'>
 						<input dojoType="dijit.form.TextBox" id="filter_search" size="20" type="search"
-							value="<?php echo $filter_search ?>">
+							value="<?php echo htmlspecialchars($filter_search) ?>">
 						<button dojoType="dijit.form.Button" onclick="dijit.byId('filterTree').reload()">
 							<?php echo __('Search') ?></button>
 					</div>
diff --git a/classes/pref/system.php b/classes/pref/system.php
index 994e024c7..72e15e4f3 100644
--- a/classes/pref/system.php
+++ b/classes/pref/system.php
@@ -146,7 +146,7 @@ class Pref_System extends Handler_Protected {
 							<td class='errstr'><?php echo  $line["errstr"] . "\n" .  $line["context"] ?></td>
 							<td class='login'><?php echo  $line["login"] ?></td>
 							<td class='timestamp'>
-								<?php TimeHelper::make_local_datetime($line["created_at"], false) ?>
+								<?php echo TimeHelper::make_local_datetime($line["created_at"], false) ?>
 							</td>
 						</tr>
 					<?php } ?>