I have the searchform.php set up to search a custom post type and a category. So far so good. However, a savvy user could edit the URL to remove "post_type=film" and search all pages and posts.
I don't want it to do this! I'd essentially like the search hardcoded to only search the specific CPT regardless of what is in the URL slug. Is this possible?
search.php contains this:
<h1><?php echo sprintf( __( '%s Search Results for ', 'site' ), $wp_query->found_posts ); echo get_search_query(); ?></h1>
<?php get_template_part('loop'); ?>
<?php get_template_part('pagination'); ?>