Index: moodle/mod/lamslesson/userinfo.php
===================================================================
RCS file: /usr/local/cvsroot/moodle/mod/lamslesson/userinfo.php,v
diff -u -r1.2 -r1.3
--- moodle/mod/lamslesson/userinfo.php	6 Jan 2012 13:23:00 -0000	1.2
+++ moodle/mod/lamslesson/userinfo.php	21 Mar 2012 16:54:56 -0000	1.3
@@ -17,8 +17,8 @@
     global $DB;
 
     $hs = required_param('hs', PARAM_ALPHANUM);
-    $ts = required_param('ts', PARAM_RAW);
-    $un = required_param('un', PARAM_ALPHANUM);
+    $ts = required_param('ts', PARAM_RAW_TRIMMED);
+    $un = required_param('un', PARAM_RAW_TRIMMED);    
     $lsid = optional_param('lsid', '', PARAM_INT);
 
     if(!isset($CFG->lamslesson_serverid)||!isset($CFG->lamslesson_serverkey))