fix rpc setpref (key unassigned)

diff --git a/classes/rpc.php b/classes/rpc.php
index d5e7b937ad526f23374002a311e0d8976ff0e894..a5e32d47e594d43623823de674b91b2cfef61cd9 100644 (file)
--- a/classes/rpc.php
+++ b/classes/rpc.php
@@ -210,9 +210,9 @@ class RPC extends Protected_Handler {
        }
 
        function setpref() {
-               $value = str_replace("\n", "<br/>", $_REQUEST['value']);
-
                // set_pref escapes input, so no need to double escape it here
+               $key = $_REQUEST['key'];
+               $value = str_replace("\n", "<br/>", $_REQUEST['value']);
 
                set_pref($this->link, $key, $value, $_SESSION['uid'], $key != 'USER_STYLESHEET');