diff --git a/api.php b/api.php
index b6ecd5f..6d11b8d 100755
--- a/api.php
+++ b/api.php
@@ -203,6 +203,7 @@ if ($q == "getAddress") {
      */
 
     $account = san($data['account']);
+    $public_key = san($data['public_key'] ?? '');
     if (!empty($public_key) && strlen($public_key) < 32) {
         api_err("Invalid public key");
     }