Use htmlentities() instead of strip_tags() on the search results page

hatrickpatrick

Just noticed that when I posted a message consisting only of </thread> and a smiley, all that appeared in the search results for "all posts by me" was the letter D. The source of the page also showed only the letter D in that space.

I suspect that this is because strip_tags() was used in this script as opposed to htmlentities(), such that special characters are omitted altogether from the result as opposed to being parsed into &lt, &gt etc.

Not a massive bug at all, just something to look at. I'm more curious than anything else, as to whether my diagnosis of why this is happening is in fact why it's happening