diff --git a/wp-admin/edit.php b/wp-admin/edit.php
index aacb05ca9..ca8141880 100644
--- a/wp-admin/edit.php
+++ b/wp-admin/edit.php
@@ -88,7 +88,7 @@ if ( is_month() ) {
 <form name="searchform" action="" method="get" style="float: left; width: 16em; margin-right: 3em;"> 
   <fieldset> 
   <legend><?php _e('Search Posts&hellip;') ?></legend> 
-  <input type="text" name="s" value="<?php if (isset($s)) echo $s; ?>" size="17" /> 
+  <input type="text" name="s" value="<?php if (isset($s)) echo wp_specialchars($s, 1); ?>" size="17" /> 
   <input type="submit" name="submit" value="<?php _e('Search') ?>"  /> 
   </fieldset>
 </form>
diff --git a/wp-admin/post.php b/wp-admin/post.php
index cbd51e185..20fbd8e39 100644
--- a/wp-admin/post.php
+++ b/wp-admin/post.php
@@ -487,7 +487,7 @@ case 'confirmdeletecomment':
 	require_once('./admin-header.php');
 
 	$comment = $_GET['comment'];
-	$p = $_GET['p'];
+	$p = (int) $_GET['p'];
 	$commentdata = get_commentdata($comment, 1, true) or die(sprintf(__('Oops, no comment with this ID. <a href="%s">Go back</a>!'), 'edit.php'));
 
 	if (!user_can_delete_post_comments($user_ID, $commentdata['comment_post_ID'])) {