I am looking for a starting pointfor a sitewide search injection within own database queries and what I found is: $content["search_word"];
Is this set by search ? Is there a way to get injection active, by checking of f.e. (!empty ($content["search_word"])) ?
Am I wrong ?
Thansk for answers !