It is necessary to filter the variable. Otherwise can be:
search.php?s=<script>alert('xss');</script>
I have a question. Why gives only 5 results?
I just now decided to try to do it on another site.
1 curtida