diff options
| author | Evan Prodromou <evan@prodromou.name> | 2008-07-09 18:59:42 -0400 |
|---|---|---|
| committer | Evan Prodromou <evan@prodromou.name> | 2008-07-09 18:59:42 -0400 |
| commit | 7469d147878314a7a121c32f05e043a9ef6d0850 (patch) | |
| tree | 1cebe99b6a9bdb04a5ae19e0a8120e26d59ae681 /actions | |
| parent | 09e1b247f9e32b79fc10e6fb6f9340bcf556df41 (diff) | |
specialchars() text in search results
darcs-hash:20080709225942-84dde-80c201825f566af717456f13d17e7382ce234692.gz
Diffstat (limited to 'actions')
| -rw-r--r-- | actions/peoplesearch.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/actions/peoplesearch.php b/actions/peoplesearch.php index 045d99e39..5d1014017 100644 --- a/actions/peoplesearch.php +++ b/actions/peoplesearch.php @@ -158,7 +158,7 @@ class PeoplesearchAction extends Action { function highlight($text, $terms) { $pattern = '/('.implode('|',array_map('htmlspecialchars', $terms)).')/i'; - $result = preg_replace($pattern, '<strong>\\1</strong>', $text); + $result = preg_replace($pattern, '<strong>\\1</strong>', htmlspecialchars($text)); return $result; } } |