I submit search data to custom page searchi.php
<?php // $search_variables = $_GET['s']. '+' .$_GET['cat']; //This sends http post to url without curl header("Status: 301 Moved Permanently"); header("Location:http://localhost/wordpress/?s=$search_variables"); exit; ?>
I know wp_query sanitize variables for me, so should not worry about it. But its better to ask than be sorry, is there any way this would compromise security?
I noticed echoing variable $search_variables with
<div></div> inserted through search form works, so should I do something about it?