|
@@ -66,8 +66,8 @@
|
|
|
function print_next_page_button($text, $page, $query, $type)
|
|
|
{
|
|
|
echo "<form class=\"page\" action=\"search.php\" target=\"_top\" method=\"post\" enctype=\"multipart/form-data\" autocomplete=\"off\">";
|
|
|
- echo "<input type=\"hidden\" name=\"p\" value=\"" . $page . "\" />";
|
|
|
- echo "<input type=\"hidden\" name=\"q\" value=\"$query\" />";
|
|
|
+ echo "<input type=\"hidden\" name=\"p\" value=\"$page\" />";
|
|
|
+ echo "<input type=\"hidden\" name=\"q\" value=\"" . htmlspecialchars($query) ."\" />";
|
|
|
echo "<input type=\"hidden\" name=\"t\" value=\"$type\" />";
|
|
|
echo "<button type=\"submit\">$text</button>";
|
|
|
echo "</form>";
|