Fix XSS Vulnerability In "tpl.inc.php"

Another area was also outputting the unsanitized value.