Added another s() to the query strings. Thanks Petr!

diff --git a/admin/search.php b/admin/search.php
index 275e494a9a7a02a9fe070df35f91bcea64f03d68..6c91d82ff43013b1157b0122e487a19469c9d1ce 100644 (file)
--- a/admin/search.php
+++ b/admin/search.php
@@ -53,7 +53,7 @@ admin_externalpage_print_header($adminroot);
 
 echo '<form action="search.php" method="post" name="mainform" id="adminsettings">';
 echo '<input type="hidden" name="sesskey" value="' . sesskey() . '" />';
-echo '<input type="hidden" name="query" value="' . $query . '" />';
+echo '<input type="hidden" name="query" value="' . s($query) . '" />';
 echo '<fieldset>';
 echo '<div class="clearer"><!-- --></div>';
 if ($resultshtml != '') {