From 965ccba9f44ed2f22fb9ed87b772eecb5926cee9 Mon Sep 17 00:00:00 2001 From: Petr Skoda Date: Thu, 2 Sep 2010 18:35:44 +0000 Subject: [PATCH] MDL-23184 no need to clean searches, we use bound params now and we do not print it anywhere --- enrol/ajax.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/enrol/ajax.php b/enrol/ajax.php index 07fa5e4723f..da6aa1c08c4 100644 --- a/enrol/ajax.php +++ b/enrol/ajax.php @@ -120,7 +120,7 @@ switch ($action) { break; case 'searchusers': $enrolid = required_param('enrolid', PARAM_INT); - $search = optional_param('search', '', PARAM_CLEAN); + $search = optional_param('search', '', PARAM_RAW); $page = optional_param('page', 0, PARAM_INT); $outcome->response = $manager->get_potential_users($enrolid, $search, false, $page); foreach ($outcome->response['users'] as &$user) { @@ -131,7 +131,7 @@ switch ($action) { break; case 'searchotherusers': - $search = optional_param('search', '', PARAM_CLEAN); + $search = optional_param('search', '', PARAM_RAW); $page = optional_param('page', 0, PARAM_INT); $outcome->response = $manager->search_other_users($search, false, $page); foreach ($outcome->response['users'] as &$user) {