// Apply any provided text search to name, description, short description, and street address
if (isset($_REQUEST['textSearch']) && $_REQUEST['textSearch'] != '') {
- $textSearch = filter_input(INPUT_POST, 'textSearch', FILTER_SANITIZE_STRING, FILTER_FLAG_NO_ENCODE_QUOTES);
+ $textSearch = addslashes(filter_input(INPUT_POST, 'textSearch', FILTER_SANITIZE_STRING, FILTER_FLAG_NO_ENCODE_QUOTES));
$where .= $whereSep." (
(
SELECT true
T.addr2 LIKE '%$textSearch%'
)";
$whereSep = ' AND ';
+ $textSearch = stripslashes($textSearch);
}
// Get category data for search pick list and shortcode selection