diff --git a/en/cgi/man.cgi b/en/cgi/man.cgi
index 0f788126c1..8589fb5c20 100755
--- a/en/cgi/man.cgi
+++ b/en/cgi/man.cgi
@@ -33,7 +33,7 @@
 #	BSDI	Id: bsdi-man,v 1.2 1995/01/11 02:30:01 polk Exp 
 # Dual CGI/Plexus mode and new interface by sanders@bsdi.com 9/22/1995
 #
-# $Id: man.cgi,v 1.172 2007-03-20 20:03:07 wosch Exp $
+# $Id: man.cgi,v 1.173 2007-05-04 19:58:59 wosch Exp $
 
 ############################################################################
 # !!! man.cgi is stale perl4 code !!!
@@ -466,6 +466,13 @@ sub do_man {
     $apropos = $form{'apropos'};
     $alttitle = $form{'title'};
     $manpath = $form{'manpath'};
+
+    if ($manpath =~ /^([0-9A-Za-z \.\-]+)$/) {
+	$manpath = $1;
+    } else {
+	$manpath = '';
+    }
+
     if (!$manpath) {
 	$manpath = $manPathDefault;
     } elsif (!$manPath{$manpath}) {
@@ -1083,7 +1090,7 @@ ETX
 }
 
 sub copyright {
-    $id = '$Id: man.cgi,v 1.172 2007-03-20 20:03:07 wosch Exp $';
+    $id = '$Id: man.cgi,v 1.173 2007-05-04 19:58:59 wosch Exp $';
 
     return qq{\
 <PRE>
@@ -1135,7 +1142,7 @@ sub faq {
 	     &encode_url($_) . "\n") if $manPathAliases{$_};
     }
 
-    local $id = '$Id: man.cgi,v 1.172 2007-03-20 20:03:07 wosch Exp $';
+    local $id = '$Id: man.cgi,v 1.173 2007-05-04 19:58:59 wosch Exp $';
     return qq{\
 <PRE>
 Copyright (c) 1996-2007 <a href="$mailtoURL">Wolfram Schneider</A>