    public function actionHideWidget() {
        if (isset($_POST['name']) && isset ($_POST['position'])) {
            $name = $_POST['name'];
            $position = $_POST['position'];

            $layout = Yii::app()->params->profile->getLayout();
            if (isset ($layout[$position][$name])) {

                $layout['hiddenRight'][$name] = $layout[$position][$name];
                unset ($layout[$position][$name]);
                Yii::app()->params->profile->saveLayout($layout);
            }

            echo Yii::app()->params->profile->getWidgetMenu();
        }
    }
The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.