ZaneYork
/
zoneminder
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

detaint language file.

This commit is contained in:
Isaac Connor 2022-02-08 14:17:30 -05:00
parent 6268652520
commit 2396e98fb9
1 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
web/includes/lang.php
View File

@ -34,7 +34,8 @@ function loadLanguage($prefix='') {
$prefix = $prefix.'/';
if (isset($user['Language']) and $user['Language']) {
$userLangFile = $prefix.'lang/'.$user['Language'].'.php';
# Languages can only have letters, numbers and underscore
$userLangFile = $prefix.'lang/'.preg_replace('/[^[:alnum:]_]+/', '', $user['Language']).'.php';
if (file_exists($userLangFile)) {
return $userLangFile;
@ -43,7 +44,7 @@ function loadLanguage($prefix='') {
}
}
$systemLangFile = $prefix.'lang/'.ZM_LANG_DEFAULT.'.php';
$systemLangFile = $prefix.'lang/'.preg_replace('/[^[:alnum:]_]+/', '', ZM_LANG_DEFAULT).'.php';
if ( file_exists($systemLangFile) ) {
return $systemLangFile;
} else {