From 59c93e8faa3889f6e80dacbabc7a34b7ab62ed44 Mon Sep 17 00:00:00 2001
From: Claude <longneck@scratchbook.ch>
Date: Tue, 27 Jan 2015 13:53:12 +0100
Subject: [PATCH] encode quotes

fixes #248
---
 htdocs/themes/default/views/defaults/header.php | 1 +
 htdocs/themes/default/views/view/search.php     | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/htdocs/themes/default/views/defaults/header.php b/htdocs/themes/default/views/defaults/header.php
index 08b4f30..31e45a8 100644
--- a/htdocs/themes/default/views/defaults/header.php
+++ b/htdocs/themes/default/views/defaults/header.php
@@ -37,6 +37,7 @@ $this->carabiner->css('diff.css');
 $this->carabiner->display('css'); 
 
 $searchparams = ($this->input->get('search') ? '?search=' . $this->input->get('search') : '');
+$searchparams = str_replace('"', '&quot;', $searchparams);
 
 ?>
 	<script type="text/javascript">
diff --git a/htdocs/themes/default/views/view/search.php b/htdocs/themes/default/views/view/search.php
index 49cc73d..d568aab 100644
--- a/htdocs/themes/default/views/view/search.php
+++ b/htdocs/themes/default/views/view/search.php
@@ -3,7 +3,7 @@
         <div class="item">
             <label for="search"><?php echo lang('paste_search'); ?>
             </label>
-            <input type="text" name="search" value="<?php echo $this->input->get('search'); ?>" id="search" maxlength="100" tabindex="1" />
+            <input type="text" name="search" value="<?php echo str_replace('"', '&quot;', $this->input->get('search')); ?>" id="search" maxlength="100" tabindex="1" />
         </div>
     </div>
 </form>