diff -Nur --no-dereference smeserver-crontab_manager-2.4.old/root/etc/e-smith/web/functions/cronmanager smeserver-crontab_manager-2.4/root/etc/e-smith/web/functions/cronmanager
--- smeserver-crontab_manager-2.4.old/root/etc/e-smith/web/functions/cronmanager	2005-08-27 08:30:43.000000000 -0400
+++ smeserver-crontab_manager-2.4/root/etc/e-smith/web/functions/cronmanager	2021-04-09 16:46:49.990000000 -0400
@@ -243,7 +243,7 @@
             >
             <label>USER_RUN_CRON</label>
         </field>
-        <field type="text" id="command" value="give_numeric(9)" size="50" validation="nonblank">
+        <field type="text" id="command" value="give_numeric(9)" size="50" validation="nonblank,nocoma">
             <label>COMMAND_LABEL</label>
         </field>
         <subroutine src="change_cron_entry()" />   
diff -Nur --no-dereference smeserver-crontab_manager-2.4.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/cronmanager.pm smeserver-crontab_manager-2.4/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/cronmanager.pm
--- smeserver-crontab_manager-2.4.old/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/cronmanager.pm	2021-04-09 16:42:15.313000000 -0400
+++ smeserver-crontab_manager-2.4/root/usr/share/perl5/vendor_perl/esmith/FormMagick/Panel/cronmanager.pm	2021-04-09 16:45:24.762000000 -0400
@@ -31,6 +31,7 @@
 use esmith::event;
 use esmith::AccountsDB;
 
+use HTML::Entities;
 use File::Basename;
 use Carp;
 use Exporter;
@@ -469,7 +470,7 @@
     if ($fld_value eq '*') {
         $ret=""
     } else {
-        $ret=$fld_value;
+        $ret=encode_entities( $fld_value);
     }
     return($ret);
         
@@ -699,5 +700,19 @@
     return(\%existingAccounts);
 }
 
+=head2 nocoma
+
+No coma authorized in this field, or it will break things
+
+=cut
+sub nocoma
+{
+    my ($fm, $data) = @_;
+    if ($data =~ /,/)
+    {
+        return "NO_COMA_ALLOWED";
+    }
+    return "OK";
+}
 # never forget the final 1 ;-)
 1;