I submit search data to a custom page
<?php // $search_variables = $_GET['s']. '+' .$_GET['cat']; //This sends http post to url without curl header("Status: 301 Moved Permanently"); header("Location:http://localhost/wordpress/?s=$search_variables"); exit; ?>
wp_query sanitizes variables for me, so I should not worry about it. But it is better to ask than be sorry, is there any way this would compromise security?
I noticed echoing variable
<div></div> inserted through search form works, so should I do something about it?