Ensure idSite is set correctly for custom variable management (#13510)

1 files changed, 5 insertions, 1 deletions

diff --git a/plugins/CustomVariables/Controller.php b/plugins/CustomVariables/Controller.php
index e73e58b257..432fb582d2 100644
--- a/plugins/CustomVariables/Controller.php
+++ b/plugins/CustomVariables/Controller.php
@@ -11,12 +11,16 @@ namespace Piwik\Plugins\CustomVariables;
 use Piwik\Common;
 use Piwik\DataTable;
 use Piwik\Piwik;
+use Piwik\Site;
 
 class Controller extends \Piwik\Plugin\Controller
 {
     public function manage()
     {
-        $idSite = Common::getRequestVar('idSite');
+        $idSite = Common::getRequestVar('idSite', null, 'int');
+
+        // check the site exists
+        $site = new Site($idSite);
 
         Piwik::checkUserHasAdminAccess($idSite);