diff --git a/cataloguing/ysearch.pl b/cataloguing/ysearch.pl
index 7216d559b0..609f4cb0b1 100755
--- a/cataloguing/ysearch.pl
+++ b/cataloguing/ysearch.pl
@@ -37,7 +37,8 @@ my $table = $input->param('table');
 my $field = $input->param('field');
 
 # Prevent from disclosing data
-die() unless ($table eq "biblioitems"); 
+die() unless ($table eq "biblioitems");
+die() unless ($field eq 'publishercode' || $field eq 'collectiontitle');
 
 binmode STDOUT, ":encoding(UTF-8)";
 print $input->header( -type => 'text/plain', -charset => 'UTF-8' );