Maybe they should of used the right check than relying on the validation of input.
PHP Code:
for (server: serverlist) {
//if (server.category != "hidden") pmlist.add(server);
if (server.category.lower() in {"gold", "classic", "hosted"}) pmlist.add(server); // ;)
}