From: <sy...@us...> - 2003-10-26 21:08:10
|
Update of /cvsroot/tikiwiki/tiki In directory sc8-pr-cvs1:/tmp/cvs-serv1707 Modified Files: tiki-searchresults.php Log Message: strip_tags: if an expert can check Index: tiki-searchresults.php =================================================================== RCS file: /cvsroot/tikiwiki/tiki/tiki-searchresults.php,v retrieving revision 1.21 retrieving revision 1.22 diff -u -d -r1.21 -r1.22 --- tiki-searchresults.php 8 Oct 2003 04:11:54 -0000 1.21 +++ tiki-searchresults.php 26 Oct 2003 20:35:21 -0000 1.22 @@ -161,9 +161,10 @@ $smarty->assign('words', ''); } else { - $results = $searchlib->$find_where($_REQUEST["words"], $offset, $maxRecords, $fulltext); + $words = strip_tags($_REQUEST["words"]); + $results = $searchlib->$find_where($words, $offset, $maxRecords, $fulltext); - $smarty->assign('words', $_REQUEST["words"]); + $smarty->assign('words', $words); } //if ($fulltext == 'y') { |