minor fixes re: previous

classes/pref/filters.php

@@ -717,7 +717,7 @@ class Pref_Filters extends Handler_Protected {
 
 					<div style='float : right; padding-right : 4px;'>
 						<input dojoType="dijit.form.TextBox" id="filter_search" size="20" type="search"
-							value="<?php echo $filter_search ?>">
+							value="<?php echo htmlspecialchars($filter_search) ?>">
 						<button dojoType="dijit.form.Button" onclick="dijit.byId('filterTree').reload()">
 							<?php echo __('Search') ?></button>
 					</div>

classes/pref/system.php

@@ -146,7 +146,7 @@ class Pref_System extends Handler_Protected {
 							<td class='errstr'><?php echo  $line["errstr"] . "\n" .  $line["context"] ?></td>
 							<td class='login'><?php echo  $line["login"] ?></td>
 							<td class='timestamp'>
-								<?php TimeHelper::make_local_datetime($line["created_at"], false) ?>
+								<?php echo TimeHelper::make_local_datetime($line["created_at"], false) ?>
 							</td>
 						</tr>
 					<?php } ?>