1 reply to this topic

[geobaby]

I'd like to recommend that the following change be made to

http://www.oscommerce.com/community/contributions,949

The original contrib has the following line

$referer = getenv('HTTP_REFERER');

I'd recommend it be changed to

$referer = mysql_escape_string (getenv('HTTP_REFERER'));

This prevents SQL errors when a user uses an ' in their search query. For example "Father's day".

[geobaby]

Oops.. my apologies. Just noticed that there was a support thread for this contrib should have posted it there.