Fix XSS vulnerability in reportengine.php