diff --git a/stats/list_rankup.php b/stats/list_rankup.php
index cf489e3..87c5078 100644
--- a/stats/list_rankup.php
+++ b/stats/list_rankup.php
@@ -28,15 +28,14 @@ if(!isset($_SESSION[$rspathhex.'tsuid'])) {
 	set_session_ts3($ts['voice'], $mysqlcon, $dbname, $language, $adminuuid);
 }
 
-$_GET["search"] = htmlspecialchars($_POST['usersuche']);
-
 if(isset($_POST['username'])) {
 	$_GET["seite"] = 1;
+	$_GET["search"] = $_POST['usersuche'];
 }
 $filter='';
 $searchstring='';
 if(isset($_GET["search"]) && $_GET["search"] != '') {
-	$getstring = $_GET['search'];
+	$getstring = htmlspecialchars($_GET['search']);
 }
 if(isset($getstring) && strstr($getstring, 'filter:excepted:')) {
 	if(str_replace('filter:excepted:','',$getstring)!='') {