From 7e154ab093546e5288221685c1f8bfec2382d09a Mon Sep 17 00:00:00 2001
From: plegall <plg@piwigo.org>
Date: Fri, 20 Sep 2019 14:02:03 +0200
Subject: [PATCH] issue #1075 check the url keys are expected

---
 admin/permalinks.php | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/admin/permalinks.php b/admin/permalinks.php
index 5520a91c2..eaebb6c64 100644
--- a/admin/permalinks.php
+++ b/admin/permalinks.php
@@ -26,6 +26,12 @@ function parse_sort_variables(
     {
       $base_url .= $is_first ? '?' : '&amp;';
       $is_first = false;
+
+      if (!in_array($key, array('page', 'psf', 'dpsf', 'pwg_token')))
+      {
+        fatal_error('unexpected URL get key');
+      }
+
       $base_url .= urlencode($key).'='.urlencode($value);
     }
   }