| @@ -147,11 +147,11 @@ | ||
| 147 | 147 | return; |
| 148 | 148 | } |
| 149 | 149 | |
| 150 | 150 | echo '<div class="back-to-search">'; |
| 151 | - if ( isset($_SESSION['last_search']) && $_SESSION['last_search'] != '' ) | |
| 151 | + if ( isset($_SESSION['last_search']) && is_string( $_SESSION['last_search'] ) && $_SESSION['last_search'] != '' ) | |
| 152 | 152 | { |
| 153 | - echo '<a href="' . esc_url($_SESSION['last_search']) . '">'; | |
| 153 | + echo '<a href="' . esc_url( esc_url_raw( $_SESSION['last_search'] ) ) . '">'; | |
| 154 | 154 | } |
| 155 | 155 | else |
| 156 | 156 | { |
| 157 | 157 | echo '<a href="' . esc_url(get_permalink(ph_get_page_id( 'search_results' ))) . '">'; |
