XSS vulnerability on search.php fixed