From 0397ae8ff947b51cbef901fa28b77dfa59a9dc14 Mon Sep 17 00:00:00 2001
From: dsa <dsa>
Date: Fri, 19 Jan 2007 01:33:09 +0000
Subject: Solved #6191

---
 web/lib/pkgfuncs.inc | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

(limited to 'web')

diff --git a/web/lib/pkgfuncs.inc b/web/lib/pkgfuncs.inc
index d7d1372..8ce26e3 100644
--- a/web/lib/pkgfuncs.inc
+++ b/web/lib/pkgfuncs.inc
@@ -714,8 +714,10 @@ function pkg_search_page($SID="") {
 	print "  <span class='f5'><span class='blue'>".__("Keywords");
 	print "</span></span><br />\n";
 	print "  <input type='text' name='K' size='20'";
-	$K = str_replace("\"", "", $_REQUEST["K"]); # TODO better testing for
-                                              # SQL trickery...
+	
+	# Added to trim() to avoid the problem described in #6191
+	$K = trim(str_replace("\"", "", $_REQUEST["K"])); # TODO better testing for SQL trickery...
+	
 	print " value=\"".stripslashes($K)."\" maxlength='35'>\n";
 	print "</td>\n";
 	
-- 
cgit v1.2.3-70-g09d2