make sure variables are properly cleaned; merged from MOODLE_16_STABLE

diff --git a/mod/glossary/tabs.html b/mod/glossary/tabs.html
index 66292b2800fdd9daf173ed8a1e5ec38101b94b83..928976139e4c95db340133af0a7aa6b56244dda5 100644 (file)
--- a/mod/glossary/tabs.html
+++ b/mod/glossary/tabs.html
@@ -5,6 +5,10 @@
     if (!isset($sortkey)) {
         $sortkey = '';
     }
+    
+    //make sure variables are properly cleaned
+    $sortkey   = clean_param($sortkey, PARAM_ALPHA);// Sorted view: CREATION | UPDATE | FIRSTNAME | LASTNAME...
+    $sortorder = clean_param($sortorder, PARAM_ALPHA);   // it defines the order of the sorting (ASC or DESC)
 
     echo '<center>';