Index: openacs-4/packages/acs-core-docs/www/sql/display-sql.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-core-docs/www/sql/display-sql.tcl,v
diff -u -r1.6 -r1.7
--- openacs-4/packages/acs-core-docs/www/sql/display-sql.tcl	27 Oct 2014 16:39:30 -0000	1.6
+++ openacs-4/packages/acs-core-docs/www/sql/display-sql.tcl	27 Jun 2015 12:26:00 -0000	1.7
@@ -20,8 +20,8 @@
     @cvs-id $Id$
 } {
     url:notnull
-    {package_key ""}
-    {db ""}
+    {package_key:token ""}
+    {db:word ""}
 }
 
 # This is normally a password-protected page, but to be safe let's
@@ -48,7 +48,9 @@
     set files [glob -nocomplain "[acs_package_root_dir $package_key]/sql/*/$url" "[acs_package_root_dir $package_key]/sql/$url"]
     foreach f $files { 
         regexp {([^/]*)/([^/]*)$} $f match db url
-        append text "<li> <a href=\"display-sql?[export_vars -url {db url package_key}]\">$db</a></li>"
+        append text [subst {
+	    <li> <a href="[ns_quotentml [export_vars -base display-sql {db url package_key}]]">$db</a></li>
+	}]
     }
     if {$files eq ""} { 
         append text "<li> No sql file found."