Improve database schema and install components

webgui/inventory.php

@@ -226,7 +226,7 @@ $opt_special = array(
   -2 => _('― all ―'),
 );
 foreach ($opt_special + $opt_invcond as $k => $v) {
-    echo '<option value="', $k,'"';
+    echo '<option value="', h($k), '"';
     if ($k == $flt->cond) {
         echo ' selected';
     }
@@ -237,7 +237,7 @@ foreach ($opt_special + $opt_invcond as $k => $v) {
         </div>
         <div class="d-flex flex-nowrap gap-2">
             <label for="flt_txt">Text</label>
-            <input type="text" class="form-control" name="flt_txt" size="15" maxlength="30" value="<?=$flt->txt ?>">
+            <input type="text" class="form-control" name="flt_txt" size="15" maxlength="30" value="<?=h($flt->txt)?>">
         </div>
     </div>
     <div class="card-footer">