--- a/busui/trip.php
+++ b/busui/trip.php
@@ -1,12 +1,12 @@
 <?php
 include('common.inc.php');
-$tripid = $_REQUEST['tripid'];
-$stopid = $_REQUEST['stopid'];
+$tripid = filter_var($_REQUEST['tripid'],FILTER_SANITIZE_NUMBER_INT);
+$stopid = filter_var($_REQUEST['stopid'],FILTER_SANITIZE_NUMBER_INT);
 if ($_REQUEST['routeid']) {
-    $url = $APIurl."/json/routetrips?route_id=".$_REQUEST['routeid'];
+    $url = $APIurl."/json/routetrips?route_id=".filter_var($_REQUEST['routeid'],FILTER_SANITIZE_NUMBER_INT);
     $trips = json_decode(getPage($url));
-debug(print_r($trips,true));
-foreach ($trips as $trip)
+    debug(print_r($trips,true));
+    foreach ($trips as $trip)
          {
             if ($trip[0] < midnight_seconds()) {
                 $tripid = $trip[1];
@@ -19,6 +19,7 @@
 $trips = array_flatten(json_decode(getPage($url)));
 debug(print_r($trips,true));
 include_header("Stops on ". $trips[1]->route_short_name . ' '. $trips[1]->route_long_name);
+timePlaceSettings();
 echo '  <ul data-role="listview"  data-inset="true">';