diff --git a/php/get.php b/php/get.php
index d6385794..12f0a321 100644
--- a/php/get.php
+++ b/php/get.php
@@ -3,6 +3,10 @@ if(!isset($_GET['list']))
     die();
 
 $type = $_GET['list'];
+
+if($type !== "white" && $type !== "black")
+    die("Invalid list parameter");
+
 $rawList = file_get_contents("/etc/pihole/${type}list.txt");
 $list = explode("\n", $rawList);