ZaneYork
/
zoneminder
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

detaint language file.

This commit is contained in:
Isaac Connor 2022-02-08 14:17:30 -05:00
parent 6268652520
commit 2396e98fb9
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
web/includes/lang.php
View File

@ -34,7 +34,8 @@ function loadLanguage($prefix='') {
$prefix = $prefix.'/'; $prefix = $prefix.'/';
if (isset($user['Language']) and $user['Language']) { if (isset($user['Language']) and $user['Language']) {
$userLangFile = $prefix.'lang/'.$user['Language'].'.php'; # Languages can only have letters, numbers and underscore
$userLangFile = $prefix.'lang/'.preg_replace('/[^[:alnum:]_]+/', '', $user['Language']).'.php';
if (file_exists($userLangFile)) { if (file_exists($userLangFile)) {
return $userLangFile; return $userLangFile;
@ -43,7 +44,7 @@ function loadLanguage($prefix='') {
} }
} }
$systemLangFile = $prefix.'lang/'.ZM_LANG_DEFAULT.'.php'; $systemLangFile = $prefix.'lang/'.preg_replace('/[^[:alnum:]_]+/', '', ZM_LANG_DEFAULT).'.php';
if ( file_exists($systemLangFile) ) { if ( file_exists($systemLangFile) ) {
return $systemLangFile; return $systemLangFile;
} else { } else {