From 842df419518478e432ed27bd8de31655e9966b68 Mon Sep 17 00:00:00 2001
From: Shish <shish@shishnet.org>
Date: Wed, 2 Oct 2019 10:23:10 +0100
Subject: [PATCH] make dbq html work

---
 ext/admin/theme.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/ext/admin/theme.php b/ext/admin/theme.php
index 4c083060..055006b3 100644
--- a/ext/admin/theme.php
+++ b/ext/admin/theme.php
@@ -59,12 +59,18 @@ class AdminPageTheme extends Themelet
 
     public function dbq_html($terms)
     {
+        $h_terms = html_escape($terms);
+
+        $warning = "";
         if (Extension::is_enabled(TrashInfo::KEY)) {
             $warning = "This delete method will bypass the trash<br/>";
         }
+
+		$h_reason = "";
         if (class_exists("ImageBan")) {
             $h_reason = "<input type='text' name='reason' placeholder='Ban reason (leave blank to not ban)'>";
         }
+
         $html = $warning.make_form(make_link("admin/delete_by_query"), "POST") . "
 				<input type='button' class='shm-unlocker' data-unlock-sel='#dbqsubmit' value='Unlock'>
 				<input type='hidden' name='query' value='$h_terms'>