Fixing a Cross-site Sccripting in admin section