diff --git a/api.php b/api.php
index 92ccacf..6ec819b 100755
--- a/api.php
+++ b/api.php
@@ -164,6 +164,7 @@ if ($q == "getAddress") {
      */
 
     $account = $data['account'];
+    $public_key = san($data['public_key'] ?? '');
     if (!empty($public_key) && strlen($public_key) < 32) {
         api_err("Invalid public key");
     }
@@ -203,6 +204,7 @@ if ($q == "getAddress") {
      */
 
     $account = san($data['account']);
+    $public_key = san($data['public_key'] ?? '');
     if (!empty($public_key) && strlen($public_key) < 32) {
         api_err("Invalid public key");
     }
diff --git a/tmp/.gitignore b/tmp/.gitignore
new file mode 100644
index 0000000..f3bd116
--- /dev/null
+++ b/tmp/.gitignore
@@ -0,0 +1,3 @@
+*
+!.gitignore
+!db-update