diff options
| author | Paweł Sroka <srokap@gmail.com> | 2014-01-01 13:12:10 +0100 |
|---|---|---|
| committer | Paweł Sroka <srokap@gmail.com> | 2014-01-01 13:12:10 +0100 |
| commit | 7006294fcbfab450289403b6519edb9d5d30ff35 (patch) | |
| tree | 5dd58bccbe443795fd41aaa4afeafba6ed2a96d5 /mod/groups/lib/groups.php | |
| parent | 82b30f63043eba9c18999bd2a15301d62ead4a76 (diff) | |
| parent | c1ea910e3b3b0bcc27a214383c9f6355a05dd495 (diff) | |
| download | elgg-7006294fcbfab450289403b6519edb9d5d30ff35.tar.gz elgg-7006294fcbfab450289403b6519edb9d5d30ff35.tar.bz2 | |
Merged in csrf_fix (pull request #7)
Added function for escaping query strings and fixed several XSRF vulnerabilities.
Diffstat (limited to 'mod/groups/lib/groups.php')
| -rw-r--r-- | mod/groups/lib/groups.php | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/mod/groups/lib/groups.php b/mod/groups/lib/groups.php index f07ab5dc6..d5bec1862 100644 --- a/mod/groups/lib/groups.php +++ b/mod/groups/lib/groups.php @@ -73,7 +73,8 @@ function groups_search_page() { elgg_push_breadcrumb(elgg_echo('search')); $tag = get_input("tag"); - $title = elgg_echo('groups:search:title', array($tag)); + $display_query = _elgg_get_display_query($tag); + $title = elgg_echo('groups:search:title', array($display_query)); // groups plugin saves tags as "interests" - see groups_fields_setup() in start.php $params = array( |