* We now escape properly in strings

git-svn-id: https://svn.code.sf.net/p/squirrelmail/code/trunk/squirrelmail@1085 7612ce4b-ef26-0410-bec9-ea0150e637f0

diff --git a/src/search.php b/src/search.php
index 79da86acd8aa95417a0f5303185b7f571041dd99..0aad14b77db5606fa62e63f8bad077262d93f705 100644 (file)
--- a/src/search.php
+++ b/src/search.php
@@ -72,8 +72,8 @@
    if (!isset($what))
        $what = '';
    $what_disp = ereg_replace(',', ' ', $what);
-   $what_disp = str_replace('\\', '\', $what_disp);
-   $what_disp = str_replace('\"', '"', $what_disp);
+   $what_disp = str_replace('\\\\', '\\', $what_disp);
+   $what_disp = str_replace('\\"', '"', $what_disp);
    $what_disp = str_replace('"', '"', $what_disp);
    echo "          <INPUT TYPE=\"TEXT\" SIZE=\"20\" NAME=\"what\" VALUE=\"$what_disp\">\n";
    echo '        </TD>';