Browse by Category Error

[boyles]

Thanks for the great work.

I've noticed that if my Category Titles include the '&' character, the browsing is not limited to the category.

Eg

'Category Name' ---> Shows
'all' ---> everything
'a' ---> only a
'a & b' ---> everything

Hope this makes sense

Cheers

[Yankidank]

Then maybe you should quit using the & character . Thanks for letting us know.

[phpmattk]

I haven't looked closer yet, but this sounds like some unvalidated input being used to form a query. probably should look into this as it is probably a weak point for sql injection