diff options
| -rw-r--r-- | inc/template.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/inc/template.php b/inc/template.php index ba64d4120..0deeff32d 100644 --- a/inc/template.php +++ b/inc/template.php @@ -542,7 +542,7 @@ function tpl_searchform(){ print '<input type="text" '; if ($ACT == 'search') - print 'value="'.$_REQUEST['id'].'" '; /* keep search input as long as user stays on search page */ + print 'value="'.htmlspecialchars($_REQUEST['id']).'" '; print 'id="qsearch_in" accesskey="f" name="id" class="edit" onkeyup="ajax_qsearch.call(\'qsearch_in\',\'qsearch_out\')" />'; print '<input type="submit" value="'.$lang['btn_search'].'" class="button" />'; |