// Default theme first
$newTheme = 'default';
if (isGetRequestElementSet('theme')) $newTheme = getRequestElement('theme');
- if (isPostRequestElementSet('theme')) $newTheme = SQL_ESCAPE(postRequestElement('theme'));
+ if (isPostRequestElementSet('theme')) $newTheme = secureString(postRequestElement('theme'));
outputHtml('?theme=' . $newTheme . '&installing=1', false);
} else {
// Add SVN revision to bypass caching problems