From 7a6b6d5f192a3c19f4fc868fdaec9e858ef34fe0 Mon Sep 17 00:00:00 2001
From: skodak <skodak>
Date: Tue, 5 Jul 2005 07:49:30 +0000
Subject: [PATCH] added validation for themename - see SC #101

---
 lib/weblib.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/weblib.php b/lib/weblib.php
index 992e353f453..efb3140c577 100644
--- a/lib/weblib.php
+++ b/lib/weblib.php
@@ -2013,6 +2013,8 @@ function style_sheet_setup($lastmodified=0, $lifetime=300, $themename='', $force
 
     if (empty($themename)) {
         $themename = current_theme();  // So we have something.  Normally not needed.
+    } else {
+        $themename = clean_param($themename, PARAM_SAFEDIR);
     }
 
     if (!empty($forceconfig)) {        // Page wants to use the config from this theme instead