Merge pull request #446 from gnuheidix/search_term

makes sure that only strings are being processed in searchTerm
This commit is contained in:
onli 2017-02-07 21:15:11 +01:00 committed by GitHub
commit 9511b9dde5

View File

@ -427,7 +427,7 @@ if (!isset($serendipity['GET']['adminAction'])) {
// Make sure this variable is always properly sanitized. Previously in compat.inc.php, but there LANG_CHARSET was not defined. // Make sure this variable is always properly sanitized. Previously in compat.inc.php, but there LANG_CHARSET was not defined.
if (isset($serendipity['GET']['searchTerm'])) { if (isset($serendipity['GET']['searchTerm'])) {
$serendipity['GET']['searchTerm'] = serendipity_specialchars(strip_tags($serendipity['GET']['searchTerm'])); $serendipity['GET']['searchTerm'] = (is_string($serendipity['GET']['searchTerm']) ? serendipity_specialchars(strip_tags($serendipity['GET']['searchTerm'])) : '');
} }
// Some stuff... // Some stuff...