fixes #559, escape quick search chars before display

This commit is contained in:
plegall 2016-11-29 14:39:42 +01:00
parent 309a079e39
commit 7b2315a88b

View file

@ -61,7 +61,7 @@ $search = get_search_array($_GET['search_id']);
if (isset($search['q'])) if (isset($search['q']))
{ {
$template->append( 'search_words', $search['q'] ); $template->append( 'search_words', htmlspecialchars($search['q']) );
} }
else else
{ {