Strip slashes from admin search string (it's ok, it never gets near a database)

diff --git a/admin/search.php b/admin/search.php
index ea93dd661d92b4599efb15373298cfd07d267567..275e494a9a7a02a9fe070df35f91bcea64f03d68 100644 (file)
--- a/admin/search.php
+++ b/admin/search.php
@@ -5,7 +5,7 @@
 require_once('../config.php');
 require_once($CFG->libdir.'/adminlib.php');
 
-$query = trim(required_param('query', PARAM_NOTAGS));  // Search string
+$query = trim(stripslashes_safe(required_param('query', PARAM_NOTAGS)));  // Search string
 
 $adminroot = admin_get_root();
 admin_externalpage_setup('search', $adminroot); // now hidden page