中文版 review/search 中增加了关键词的过滤

application/default/controllers/ReviewController.php

@@ -386,6 +386,28 @@ class ReviewController extends Zend_Controller_Action
    function searchAction()
    {
     	$key=$this->_request->getParam('q');
+		
+		if(preg_match("/\"|'|<|>/",$key))
+		{
+			$data=array(
+				'<'=>'&lt;',
+				'>'=>'&gt;',
+				"\'"=>'’',
+				"\""=>'”',
+			);
+
+			$patterns = array();
+			$replacements = array();
+			foreach($data as $k=>$v)
+			{
+					$patterns[]='/'.$k.'/i';
+					$replacements[]=$v;
+			}
+			ksort($patterns);
+			ksort($replacements);
+			$key=preg_replace($patterns, $replacements, $key);
+		}
+		
     	if (!empty($key)) {
     		$search=new Search($key);
     		$where=$search->sql_expr(array("m.title","m.description"));