From a3bb4c6dc9aaf490532a8019ef062e578ef735ba Mon Sep 17 00:00:00 2001 From: Len Kranendonk Date: Fri, 19 Mar 2004 08:41:03 +0000 Subject: [PATCH] Fixed security issue --- lib/WebGUI/Wobject/IndexedSearch.pm | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/lib/WebGUI/Wobject/IndexedSearch.pm b/lib/WebGUI/Wobject/IndexedSearch.pm index df3e56629..e791661f1 100644 --- a/lib/WebGUI/Wobject/IndexedSearch.pm +++ b/lib/WebGUI/Wobject/IndexedSearch.pm @@ -254,7 +254,10 @@ sub www_view { $var{query} .= " ".join(" ",map("+".$_,split(/\s+/,$var{allWords}))) if ($var{allWords}); $var{query} .= qq{ $var{atLeastOne}} if ($var{atLeastOne}); $var{query} .= " ".join(" ",map("-".$_,split(/\s+/,$var{without}))) if ($var{without}); - + + # Remove macro's from query + $var{query} = WebGUI::Macro::negate($var{query}); + # Set some standard vars $var{submit} = WebGUI::Form::submit({value=>WebGUI::International::get(16, $self->get("namespace"))}); $var{"int.search"} = WebGUI::International::get(16,$self->get("namespace"));