[Chuck S]

Try this in uploadproduct.php

list( $pptemplate, $reviewtype ) = mysql_fetch_row($reviewtypes);

$Globals['cattemp'] = $pptemplate;
}
else {
$Globals['cattemp'] = $pptemplate;
$cat = 0;
}

htmlspecialchars was the cause