Cookie vulnerability fixed.

1 files changed, 6 insertions, 1 deletions

diff --git a/index.php b/index.php
index 9310f4e..51a222c 100644
--- a/index.php
+++ b/index.php
@@ -10,7 +10,12 @@ if ($printview_default == 'yes') {
 	$printview = $default_view;
 	$default_view = "print.php";
 } else {
-	$default_view = "$default_view" . ".php";
+	$check = array ('day', 'week', 'month');
+	if (in_array($default_view, $check)) {
+		$default_view = $default_view . '.php';
+	} else {
+		die;
+	}
 }
 /*header("Location: $default_view");*/