From 7b2315a88b9e554967e7ae2ef112c9d1d58222a9 Mon Sep 17 00:00:00 2001
From: plegall <plg@piwigo.org>
Date: Tue, 29 Nov 2016 14:39:42 +0100
Subject: [PATCH] fixes #559, escape quick search chars before display

---
 search_rules.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/search_rules.php b/search_rules.php
index 7ec39ace5..672e873cf 100644
--- a/search_rules.php
+++ b/search_rules.php
@@ -61,7 +61,7 @@ $search = get_search_array($_GET['search_id']);
 
 if (isset($search['q']))
 {
-  $template->append( 'search_words', $search['q'] );
+  $template->append( 'search_words', htmlspecialchars($search['q']) );
 }
 else
 {