Fix XSS vulnerability in ladder.php