Prevent SQL Injection in Search
Fix in Thread View