diff --git a/admin.php b/admin.php
index bdd4abebe..bb9b91274 100644
--- a/admin.php
+++ b/admin.php
@@ -41,6 +41,8 @@ trigger_notify('loc_begin_admin');
 
 check_status(ACCESS_ADMINISTRATOR);
 
+check_input_parameter('page', $_GET, false, '/^[a-zA-Z\d_-]+$/');
+
 // +-----------------------------------------------------------------------+
 // | Direct actions                                                        |
 // +-----------------------------------------------------------------------+