diff --git a/pagination_head.php b/pagination_head.php index f38cc4c1..68766148 100644 --- a/pagination_head.php +++ b/pagination_head.php @@ -50,9 +50,12 @@ if (isset($_GET['q'])) { // Sortby if (!empty($_GET['sb'])) { - $sb = sanitizeInput($_GET['sb']); + $sb = sanitizeInput(preg_replace('/[^a-z_]/', '', $_GET['sb'])); + } +//$sb = $_GET['sb']; + // Date Handling if (empty($_GET['canned_date'])) { //Prevents lots of undefined variable errors.