浏览代码

* We now escape properly in strings

Tyler Akins 24 年之前
父节点
当前提交
10dd001291
共有 1 个文件被更改,包括 2 次插入2 次删除
  1. 2 2
      src/search.php

+ 2 - 2
src/search.php

@@ -72,8 +72,8 @@
    if (!isset($what))
    if (!isset($what))
        $what = '';
        $what = '';
    $what_disp = ereg_replace(',', ' ', $what);
    $what_disp = ereg_replace(',', ' ', $what);
-   $what_disp = str_replace('\\', '\', $what_disp);
-   $what_disp = str_replace('\"', '"', $what_disp);
+   $what_disp = str_replace('\\\\', '\\', $what_disp);
+   $what_disp = str_replace('\\"', '"', $what_disp);
    $what_disp = str_replace('"', '"', $what_disp);
    $what_disp = str_replace('"', '"', $what_disp);
    echo "          <INPUT TYPE=\"TEXT\" SIZE=\"20\" NAME=\"what\" VALUE=\"$what_disp\">\n";
    echo "          <INPUT TYPE=\"TEXT\" SIZE=\"20\" NAME=\"what\" VALUE=\"$what_disp\">\n";
    echo '        </TD>';
    echo '        </TD>';