Index: branches/5.2.x/units/gateways/gw_tag_processor.php
===================================================================
diff -u -r15156 -r15600
--- branches/5.2.x/units/gateways/gw_tag_processor.php	(.../gw_tag_processor.php)	(revision 15156)
+++ branches/5.2.x/units/gateways/gw_tag_processor.php	(.../gw_tag_processor.php)	(revision 15600)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: gw_tag_processor.php 15156 2012-03-04 09:27:14Z alex $
+* @version	$Id: gw_tag_processor.php 15600 2012-11-02 14:17:28Z alex $
 * @package	In-Commerce
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license	Commercial License
@@ -50,7 +50,7 @@
 
 		$value = isset($this->ConfigValues[$id]) ? $this->ConfigValues[$id] : '';
 		if ( !array_key_exists('no_special', $params) || !$params['no_special'] ) {
-			$value = htmlspecialchars($value);
+			$value = htmlspecialchars($value, null, CHARSET);
 		}
 
 		if ( getArrayValue($params, 'checked') ) {
Index: branches/5.2.x/units/gateways/gw_classes/ideal_nl.php
===================================================================
diff -u -r15141 -r15600
--- branches/5.2.x/units/gateways/gw_classes/ideal_nl.php	(.../ideal_nl.php)	(revision 15141)
+++ branches/5.2.x/units/gateways/gw_classes/ideal_nl.php	(.../ideal_nl.php)	(revision 15600)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: ideal_nl.php 15141 2012-03-04 08:08:18Z alex $
+* @version	$Id: ideal_nl.php 15600 2012-11-02 14:17:28Z alex $
 * @package	In-Commerce
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license	Commercial License
@@ -103,7 +103,7 @@
 				$error_msg = $trans_data->FindChildValue('message');
 				$this->parsed_responce['XML'] = $transaction_xml;
 				$this->Application->SetVar('failure_template', $this->Application->RecallVar('gw_cancel_template'));
-				$this->parsed_responce['MESSAGE'] = $error_msg ? $error_msg : 'Unknown gateway error ('.htmlspecialchars($transaction_xml).')';
+				$this->parsed_responce['MESSAGE'] = $error_msg ? $error_msg : 'Unknown gateway error ('.htmlspecialchars($transaction_xml, null, CHARSET).')';
 				return false;
 			}
 
Index: branches/5.2.x/units/gateways/gw_classes/google_checkout.php
===================================================================
diff -u -r15141 -r15600
--- branches/5.2.x/units/gateways/gw_classes/google_checkout.php	(.../google_checkout.php)	(revision 15141)
+++ branches/5.2.x/units/gateways/gw_classes/google_checkout.php	(.../google_checkout.php)	(revision 15600)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: google_checkout.php 15141 2012-03-04 08:08:18Z alex $
+* @version	$Id: google_checkout.php 15600 2012-11-02 14:17:28Z alex $
 * @package	In-Commerce
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license	Commercial License
@@ -80,8 +80,8 @@
 			$cart_xml = Array ();
 			foreach ($order_items as $order_item) {
 				$cart_xml[] = '	<item>
-					        		<item-name>'.htmlspecialchars($order_item['ProductName']).'</item-name>
-					        		<item-description>'.htmlspecialchars($order_item[$ml_formatter->LangFieldName('DescriptionExcerpt')]).'</item-description>'.
+					        		<item-name>'.htmlspecialchars($order_item['ProductName'], null, CHARSET).'</item-name>
+					        		<item-description>'.htmlspecialchars($order_item[$ml_formatter->LangFieldName('DescriptionExcerpt')], null, CHARSET).'</item-description>'.
 									$this->getPriceXML('unit-price', $order_item['Price']).'
 					        		<quantity>'.$order_item['Quantity'].'</quantity>
 								</item>';
@@ -102,7 +102,7 @@
 
 			$shipping_xml = '';
 			foreach ($shipping_types as $shipping_name) {
-				$shipping_xml .= '	<merchant-calculated-shipping name="'.htmlspecialchars($shipping_name).'">
+				$shipping_xml .= '	<merchant-calculated-shipping name="'.htmlspecialchars($shipping_name, null, CHARSET).'">
 										<price currency="USD">0.00</price>
 									</merchant-calculated-shipping>';
 			}
@@ -390,7 +390,7 @@
 				$shipping_name = $shipping_type['ShippingName'];
 				$processable_shipping_index = array_search($shipping_name, $process_shippings);
 				if ($processable_shipping_index !== false) {
-					$shipping_types_xml .= '<result shipping-name="'.htmlspecialchars($shipping_name).'" address-id="'.$address_id.'">
+					$shipping_types_xml .= '<result shipping-name="'.htmlspecialchars($shipping_name, null, CHARSET).'" address-id="'.$address_id.'">
 				    	        				<shipping-rate currency="USD">'.sprintf('%01.2f', $shipping_type['TotalCost']).'</shipping-rate>
 				        	    				<shippable>true</shippable>
 				        					</result>';
@@ -402,7 +402,7 @@
 
 			// add unavailable shipping types
 			foreach ($process_shippings as $shipping_name) {
-				$shipping_types_xml .= '<result shipping-name="'.htmlspecialchars($shipping_name).'" address-id="'.$address_id.'">
+				$shipping_types_xml .= '<result shipping-name="'.htmlspecialchars($shipping_name, null, CHARSET).'" address-id="'.$address_id.'">
 											<shipping-rate currency="USD">0.00</shipping-rate>
 				            				<shippable>false</shippable>
 				        				</result>';
Index: branches/5.2.x/units/product_options/product_options_tag_processor.php
===================================================================
diff -u -r15312 -r15600
--- branches/5.2.x/units/product_options/product_options_tag_processor.php	(.../product_options_tag_processor.php)	(revision 15312)
+++ branches/5.2.x/units/product_options/product_options_tag_processor.php	(.../product_options_tag_processor.php)	(revision 15600)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: product_options_tag_processor.php 15312 2012-04-20 12:29:52Z alex $
+* @version	$Id: product_options_tag_processor.php 15600 2012-11-02 14:17:28Z alex $
 * @package	In-Commerce
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license	Commercial License
@@ -61,11 +61,11 @@
 
 			if ( getArrayValue($params, 'js') ) {
 				$block_params['id'] = addslashes($val);
-				$block_params['value'] = htmlspecialchars($val);
+				$block_params['value'] = htmlspecialchars($val, null, CHARSET);
 			}
 			else {
-				$block_params['id'] = htmlspecialchars($val);
-				$block_params['value'] = htmlspecialchars($val);
+				$block_params['id'] = htmlspecialchars($val, null, CHARSET);
+				$block_params['value'] = htmlspecialchars($val, null, CHARSET);
 			}
 
 			if ( $conv_prices[$val] ) {
@@ -105,7 +105,7 @@
 				$option_value = array_key_exists($object->GetID(), $options) ? $options[$object->GetID()] : '';
 
 				if ( $object->GetDBField('OptionType') == OptionType::CHECKBOX ) {
-					$selected = is_array($option_value) && in_array(htmlspecialchars($val), $option_value);
+					$selected = is_array($option_value) && in_array(htmlspecialchars($val, null, CHARSET), $option_value);
 				}
 				else { // radio buttons ?
 					$selected = htmlspecialchars_decode($option_value) == $val;
Index: branches/5.2.x/units/order_items/order_items_tag_processor.php
===================================================================
diff -u -r15312 -r15600
--- branches/5.2.x/units/order_items/order_items_tag_processor.php	(.../order_items_tag_processor.php)	(revision 15312)
+++ branches/5.2.x/units/order_items/order_items_tag_processor.php	(.../order_items_tag_processor.php)	(revision 15600)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: order_items_tag_processor.php 15312 2012-04-20 12:29:52Z alex $
+* @version	$Id: order_items_tag_processor.php 15600 2012-11-02 14:17:28Z alex $
 * @package	In-Commerce
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license	Commercial License
@@ -126,7 +126,7 @@
 						$block_params['price_type'] = $price_type;
 						$block_params['sign'] = $price >= 0 ? '+' : '-';
 					}
-					$block_params['value'] = htmlspecialchars($val);
+					$block_params['value'] = htmlspecialchars($val, null, CHARSET);
 					$block_params['type'] = $key_data['OptionType'];
 				}
 				$o .= $this->Application->ParseBlock($block_params, 1);
@@ -176,7 +176,7 @@
 		foreach ($values as $val) {
 			$i++;
 			$val = htmlspecialchars_decode($val);
-			$block_params['value'] = htmlspecialchars($val);
+			$block_params['value'] = htmlspecialchars($val, null, CHARSET);
 			if ($price_types[$val] == '$') {
 				$iso = $this->GetISO($params['currency']);
 				$value = $this->AddCurrencySymbol(sprintf("%.2f", $this->ConvertCurrency($prices[$val], $iso)), $iso, true); // true to force sign