--- mambo/branches/4.6/administrator/components/com_menus/admin.menus.php	2009/05/28 06:41:09	1756
+++ mambo/branches/4.6/administrator/components/com_menus/admin.menus.php	2010/11/17 11:20:55	1769
@@ -21,7 +21,7 @@
 
 $id 		= intval( mosGetParam( $_GET, 'id', 0 ) );
 $type 		= mosGetParam( $_REQUEST, 'type', false );
-$menutype 	= mosGetParam( $_REQUEST, 'menutype', 'mainmenu' );
+$menutype 	= preg_replace('/\W/','',mosGetParam( $_REQUEST, 'menutype', 'mainmenu' ));
 $task 		= mosGetParam( $_REQUEST, 'task', '' );
 $access 	= mosGetParam( $_POST, 'access', '' );
 $utaccess	= mosGetParam( $_POST, 'utaccess', '' );