diff options
| author | petko <petko@524c5546-5005-0410-9a3e-e25e191bd360> | 2022-10-07 13:59:46 +0000 |
|---|---|---|
| committer | petko <petko@524c5546-5005-0410-9a3e-e25e191bd360> | 2022-10-07 13:59:46 +0000 |
| commit | 8c001bef85f60b0f17885ac95ffe596afc924029 (patch) | |
| tree | 5e1b7d660984e6ef259d8a14289a621c5a29e1d1 /scripts/pagelist.php | |
| parent | a2d0243ecad9eef0f275aa31b0de57623603be19 (diff) | |
| download | pmwiki.svn-8c001bef85f60b0f17885ac95ffe596afc924029.tar.bz2 | |
Searchbox also escape custom field names.
git-svn-id: svn://pmwiki.org/pmwiki/trunk@4188 524c5546-5005-0410-9a3e-e25e191bd360
Diffstat (limited to 'scripts/pagelist.php')
| -rw-r--r-- | scripts/pagelist.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/scripts/pagelist.php b/scripts/pagelist.php index ce7775a3..b18efcb0 100644 --- a/scripts/pagelist.php +++ b/scripts/pagelist.php @@ -170,7 +170,7 @@ function SearchBox($pagename, $opt) { $v = PHSC($v, ENT_QUOTES); $opt[$k] = $v; if(preg_match('/^(q|label|value|size|placeholder|aria-\\w+)$/', $k)) continue; - $k = str_replace("'", "'", $k); + $k = PHSC($k, ENT_QUOTES); $out .= "<input type='hidden' name='$k' value='$v' />"; } SDV($SearchBoxInputType, 'text'); |