diff --git a/upload/template/default/home/space_header.htm b/upload/template/default/home/space_header.htm
index 0bf4e1e..c4cab0f 100644
--- a/upload/template/default/home/space_header.htm
+++ b/upload/template/default/home/space_header.htm
@@ -34,7 +34,7 @@
 			</div>
 		<!--{elseif !empty($_G['cookie']['loginuser'])}-->
 			<div class="y">
-				<a id="loginuser" class="xw1">$_G['cookie']['loginuser']</a>
+				<a id="loginuser" class="xw1"><!--{echo dhtmlspecialchars($_G['cookie']['loginuser'])}--></a>
 				<a href="member.php?mod=logging&action=login" onclick="showWindow('login', this.href)">{lang activation}</a>
 				<a href="member.php?mod=logging&action=logout&formhash={FORMHASH}">{lang logout}</a>
 			</div>
diff --git a/upload/template/default/search/header.htm b/upload/template/default/search/header.htm
index ade365a..81b3396 100644
--- a/upload/template/default/search/header.htm
+++ b/upload/template/default/search/header.htm
@@ -17,7 +17,7 @@
 				<!--{hook/global_usernav_extra2}-->
 				<a href="member.php?mod=logging&action=logout&formhash={FORMHASH}">{lang logout}</a>
 			<!--{elseif !empty($_G['cookie']['loginuser'])}-->
-				<strong><a id="loginuser">$_G['cookie']['loginuser']</a></strong>
+				<strong><a id="loginuser"><!--{echo dhtmlspecialchars($_G['cookie']['loginuser'])}--></a></strong>
 				<a href="member.php?mod=logging&action=login" onclick="showWindow('login', this.href)">{lang activation}</a>
 				<a href="member.php?mod=logging&action=logout&formhash={FORMHASH}">{lang logout}</a>
 			<!--{else}-->