Add a form variable check to servicetype
From Cyclone3 Wiki
For security reasons, you might want to check user-posted form data for correctness before using them in modules, this allows you a better control of SQL injection or incorrect data control on your page.
The statement for variable check looks like this
<CHECK_FORM variable="ID" type="int" action="destroy" />
Escape variable to use in SQL (is better to bind variables in SQL execute)
<CHECK_FORM variable="ID" action="sql_escape" />