diff --git a/web/settings/downloadChargeLog.php b/web/settings/downloadChargeLog.php index a22ed0a4fc..2f2d3d0e48 100644 --- a/web/settings/downloadChargeLog.php +++ b/web/settings/downloadChargeLog.php @@ -38,6 +38,7 @@ echo json_encode(["error" => "Invalid 'year' parameter. A four-digit year, e.g., 2023, is expected."]); exit; } +$year = intval($_GET["year"]); // If the "month" parameter is provided and matches the regex for valid months (1-12), use it if (isset($_GET["month"])) {