quoting tag string

diff --git a/blog/index.php b/blog/index.php
index a4b754d3f8a4d221c331f636136d875b62cc5229..e8ef88d7552e522ea701a4eefef290c842da565b 100755 (executable)
--- a/blog/index.php
+++ b/blog/index.php
@@ -25,7 +25,7 @@ $d = optional_param('d', 0, PARAM_INT); //day
 $userid = optional_param('userid',0,PARAM_INT);
 $groupid = optional_param('groupid',0,PARAM_INT);
 $courseid = optional_param('courseid',0,PARAM_INT);
-$tag = urldecode(optional_param('tag', '', PARAM_NOTAGS));
+$tag = s(urldecode(optional_param('tag', '', PARAM_NOTAGS)));
 $tagid = optional_param('tagid', 0, PARAM_INT);
 
 $filtertype = optional_param('filtertype', '', PARAM_ALPHA);