From: skodak <skodak>
Date: Wed, 4 Jul 2007 08:31:54 +0000 (+0000)
Subject: MDL-10341 fixed user search cleaning; merged from MOODLE_18_STABLE
X-Git-Url: http://git.mjollnir.org/gw?a=commitdiff_plain;h=3593af19df75ec3dc726897caddfed69739c50f9;p=moodle.git

MDL-10341 fixed user search cleaning; merged from MOODLE_18_STABLE
---

diff --git a/user/index.php b/user/index.php
index f195321d27..1beca2599b 100644
--- a/user/index.php
+++ b/user/index.php
@@ -134,7 +134,7 @@
     }
 
     // Should use this variable so that we don't break stuff every time a variable is added or changed.
-    $baseurl = $CFG->wwwroot.'/user/index.php?contextid='.$context->id.'&amp;roleid='.$roleid.'&amp;id='.$course->id.'&amp;group='.$currentgroup.'&amp;perpage='.$perpage.'&amp;accesssince='.$accesssince.'&amp;search='.$search;
+    $baseurl = $CFG->wwwroot.'/user/index.php?contextid='.$context->id.'&amp;roleid='.$roleid.'&amp;id='.$course->id.'&amp;group='.$currentgroup.'&amp;perpage='.$perpage.'&amp;accesssince='.$accesssince.'&amp;search='.s($search);
 
 /// Print headers
 
@@ -613,7 +613,7 @@
 
     if ($bulkoperations && $totalcount > ($perpage*3)) {
         echo '<form action="index.php"><div><input type="hidden" name="id" value="'.$course->id.'" />'.get_string('search').':&nbsp;'."\n";
-        echo '<input type="text" name="search" value="'.$search.'" />&nbsp;<input type="submit" value="'.get_string('search').'" /></div></form>'."\n";
+        echo '<input type="text" name="search" value="'.s($search).'" />&nbsp;<input type="submit" value="'.get_string('search').'" /></div></form>'."\n";
     }
 
     $perpageurl = preg_replace('/&amp;perpage=\d*/','', $baseurl);