blob: ff59109379d85af664b5c95b6aedf70b075cb36e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
<?php
/**
* Search box
*
* @uses $vars['value'] Current search query
*
* @todo Move javascript into something that extends elgg.js
*/
if (array_key_exists('value', $vars)) {
$value = $vars['value'];
} elseif ($value = get_input('q', get_input('tag', NULL))) {
$value = $value;
} else {
$value = elgg_echo('search');
}
// @todo - why the strip slashes?
$value = stripslashes($value);
// @todo - create function for sanitization of strings for display in 1.8
// encode <,>,&, quotes and characters above 127
$display_query = mb_convert_encoding($value, 'HTML-ENTITIES', 'UTF-8');
$display_query = htmlspecialchars($display_query, ENT_QUOTES, 'UTF-8', false);
?>
<form class="elgg-search" action="<?php echo elgg_get_site_url(); ?>search" method="get">
<fieldset>
<input type="text" size="21" name="q" value="<?php echo elgg_echo('search'); ?>" onblur="if (this.value=='') { this.value='<?php echo elgg_echo('search'); ?>' }" onfocus="if (this.value=='<?php echo elgg_echo('search'); ?>') { this.value='' };" class="search-input" />
<input type="submit" value="<?php echo elgg_echo('search:go'); ?>" class="search-submit-button" />
</fieldset>
</form>
|
