Index: /mods/wpsg_mod_userpayment.class.php
===================================================================
--- /mods/wpsg_mod_userpayment.class.php	(revision 6954)
+++ /mods/wpsg_mod_userpayment.class.php	(revision 6955)
@@ -101,5 +101,5 @@
 					$this->shop->addTranslationString('wpsg_mod_userpayment_'.$_REQUEST['zv_id'], $_REQUEST['value']);
 					
-					die($_REQUEST['value']);
+					die(wpsg_hspc($_REQUEST['value']));
 					
 				} 
@@ -113,5 +113,5 @@
 					$this->shop->addTranslationString('wpsg_mod_userpayment_hint_'.$_REQUEST['zv_id'], $_REQUEST['value']);
 					
-					die($_REQUEST['value']);
+					die(wpsg_hspc($_REQUEST['value']));
 					
 				}
Index: /views/mailtemplates/html/customer.phtml
===================================================================
--- /views/mailtemplates/html/customer.phtml	(revision 6954)
+++ /views/mailtemplates/html/customer.phtml	(revision 6955)
@@ -157,5 +157,5 @@
 		<td style="padding:2px; line-height:100%; vertical-align:top;" class="col0"><?php echo __('Versandart', 'wpsg'); ?>:</td>
 		<td style="padding:2px; line-height:100%; vertical-align:top;" class="col1">
-			<?php echo $this->arShipping[$this->view['basket']['checkout']['shipping']]['name']; ?>
+			<?php echo wpsg_hspc($this->arShipping[$this->view['basket']['checkout']['shipping']]['name']); ?>
 			<?php $this->callMods('mail_shipping'); ?> 
 		</td>		
@@ -178,5 +178,5 @@
 		</td>
 		<td style="padding:2px; line-height:100%; vertical-align:top;" class="col1">
-			<?php echo $this->arPayment[$this->view['basket']['checkout']['payment']]['name']; ?><br />
+			<?php echo wpsg_hspc($this->arPayment[$this->view['basket']['checkout']['payment']]['name']); ?><br />
 			<?php $this->callMods('mail_payment'); ?>
 		</td>				
Index: /views/mods/mod_userpayment/list.phtml
===================================================================
--- /views/mods/mod_userpayment/list.phtml	(revision 6954)
+++ /views/mods/mod_userpayment/list.phtml	(revision 6955)
@@ -20,5 +20,5 @@
 
         <?php echo wpsg_drawForm_TextStart(); ?>
-        <span id="zv_name_<?php echo $zv['id']; ?>"><?php echo $zv['name']; ?></span>
+        <span id="zv_name_<?php echo $zv['id']; ?>"><?php echo wpsg_hspc($zv['name']); ?></span>
         <a class="wpsg_glyphicon_right glyphicon glyphicon-question-sign form-control-feedback" data-wpsg-tip="wpsg_shippay_name"
          rel="?page=wpsg-Admin&subaction=loadHelp&noheader=1&field=wpsg_shippay_name" href="?page=wpsg-Admin&subaction=loadHelp&noheader=1&field=wpsg_shippay_name"></a>