--- a/plugins/SpecialPageFuncs.php	Tue Nov 16 12:44:22 2010 -0500
+++ b/plugins/SpecialPageFuncs.php	Tue Jul 12 22:13:37 2011 -0400
@@ -88,7 +88,7 @@
     {
       $template->header();
       
-      echo '<h3>The page could not be created.</h3><p>The name "'.$p.'" is invalid.</p>';
+      echo '<h3>The page could not be created.</h3><p>The name "'.htmlspecialchars($p).'" is invalid.</p>';
       
       $template->footer();
       $db->close();
@@ -102,7 +102,7 @@
     {
       $template->header();
       
-      echo '<h3>The page could not be created.</h3><p>The name "'.$paths->nslist[$namespace].$p.'" is invalid.</p>';
+      echo '<h3>The page could not be created.</h3><p>The name "'.$paths->nslist[$namespace].htmlspecialchars($p).'" is invalid.</p>';
       
       $template->footer();
       $db->close();