Changeset 3511 for trunk/bp-groups/bp-groups-templatetags.php

Timestamp:

12/04/2010 11:41:28 PM (14 years ago)

Author:

djpaul

Message:

Fix double-escaping of search string when performing search from the site-wide search box. Partially addresses #2776.

File:

• trunk/bp-groups/bp-groups-templatetags.php (modified) (1 diff)

trunk/bp-groups/bp-groups-templatetags.php

@@ -1836 +1836 @@
 
     $search_value = __( 'Search anything...', 'buddypress' );
-    if ( isset( $_REQUEST['s'] ) && !empty( $_REQUEST['s'] ) )
-        $search_value = $_REQUEST['s'];
+    if ( !empty( $_REQUEST['s'] ) )
+        $search_value = stripslashes( $_REQUEST['s'] );
 
 ?>
     <form action="" method="get" id="search-groups-form">
-        <label><input type="text" name="s" id="groups_search" value="<?php echo esc_attr($search_value) ?>"  onfocus="if (this.value == '<?php _e( 'Search anything...', 'buddypress' ) ?>') {this.value = '';}" onblur="if (this.value == '') {this.value = '<?php _e( 'Search anything...', 'buddypress' ) ?>';}" /></label>
+        <label><input type="text" name="s" id="groups_search" value="<?php echo esc_attr( $search_value ) ?>"  onfocus="if (this.value == '<?php _e( 'Search anything...', 'buddypress' ) ?>') {this.value = '';}" onblur="if (this.value == '') {this.value = '<?php _e( 'Search anything...', 'buddypress' ) ?>';}" /></label>
         <input type="submit" id="groups_search_submit" name="groups_search_submit" value="<?php _e( 'Search', 'buddypress' ) ?>" />
     </form>