diff --git a/convert-protection-text.php b/convert-protection-text.php
index 5044d3c..cc82204 100644
--- a/convert-protection-text.php
+++ b/convert-protection-text.php
@@ -77,21 +77,21 @@ class CNV_Protection_Text {
                         <th scope="row">メッセージ</th>
                         <td>
                             <textarea name="_cnv_protect_options[text]" rows="4"
-                                      cols="60"><?php echo esc_html( $show_text ); ?></textarea>
+                                      cols="60"><?php echo esc_attr( $show_text ); ?></textarea>
                         </td>
                     </tr>
                     <tr valign="top">
                         <th scope="row">ボタンラベル</th>
                         <td>
                             <input type="text" name="_cnv_protect_options[label]"
-                                   value="<?php echo esc_html( $show_label ); ?>">
+                                   value="<?php echo esc_attr( $show_label ); ?>">
                         </td>
                     </tr>
                     <tr valign="top">
                         <th scope="row">ボタン名</th>
                         <td>
                             <input type="text" name="_cnv_protect_options[btn]"
-                                   value="<?php echo esc_html( $show_btn ); ?>">
+                                   value="<?php echo esc_attr( $show_btn ); ?>">
                         </td>
                     </tr>
                 </table>
@@ -131,7 +131,7 @@ class CNV_Protection_Text {
 
 		return '<form action="' . home_url() . '/wp-login.php?action=postpass" class="post-password-form" method="post">
 <p>' . nl2br( esc_html( $alert_text ) ) . '</p>
-<p><label for="pwbox">' . esc_html( $btn_label ) . '<input name="post_password" id="pwbox" type="password" size="20"></label> <input type="submit" name="Submit" value="' . esc_html( $btn_text ) . '"></p></form>';
+<p><label for="pwbox">' . esc_html( $btn_label ) . '<input name="post_password" id="pwbox" type="password" size="20"></label> <input type="submit" name="Submit" value="' . esc_attr( $btn_text ) . '"></p></form>';
 	}
 }