diff --git a/admin/batch_manager_global.php b/admin/batch_manager_global.php
index 11cf4edfd..2d5b53791 100644
--- a/admin/batch_manager_global.php
+++ b/admin/batch_manager_global.php
@@ -51,6 +51,7 @@ if (isset($_POST['nb_photos_deleted']))
 }
 else if (isset($_POST['setSelected']))
 {
+  check_input_parameter('whole_set', $_POST, false, '/^\d+(,\d+)*$/');
   $collection = explode(',', $_POST['whole_set']);
 }
 else if (isset($_POST['selection']))