Browse Source

changeset 9236 1b1f8b323dd0 from Dokeos

Julio Montoya 15 years ago
parent
commit
53a55fc543
1 changed files with 2 additions and 2 deletions
  1. 2 2
      main/user/user.php

+ 2 - 2
main/user/user.php

@@ -181,7 +181,7 @@ if (api_is_allowed_to_edit()) {
 function display_user_search_form() {
 	echo '<form method="get" action="user.php">';
 	echo get_lang("SearchForUser") . "&nbsp;&nbsp;";
-	echo '<input type="text" name="keyword" value="'.$_GET['keyword'].'"/>';
+	echo '<input type="text" name="keyword" value="'.Security::remove_XSS($_GET['keyword']).'"/>';
 	echo '<input type="submit" value="'.get_lang('SearchButton').'"/>';
 	echo '</form>';
 }
@@ -270,7 +270,7 @@ if (!$is_allowed_in_course) {
 -----------------------------------------------------------
 */
 if ($origin != 'learnpath') {
-	if (isset($_GET['keyword'])) {
+	if (isset($_GET['keyword']) && !empty($_GET['keyword'])) {
 		$interbreadcrumb[] = array ("url" => "user.php", "name" => get_lang("Users"));
 		$tool_name = get_lang('SearchResults');
 	} else {