diff --git a/profile.php b/profile.php
index c374f9e93e..addc807285 100644
--- a/profile.php
+++ b/profile.php
@@ -11,7 +11,9 @@
 // |                           initialization                              |
 // +-----------------------------------------------------------------------+
 
-echo $_GET['asdf'];
+if (isset($_GET['asdf'])) {
+  echo htmlspecialchars($_GET['asdf'], ENT_QUOTES, 'UTF-8');
+}
 
 if (!defined('PHPWG_ROOT_PATH'))
 {//direct script access