Fix for possible file inclusion vulnerability in i18n.php

outroll · Aug 16, 2021 · 6fdfef4 · 6fdfef4
1 parent df93775
commit 6fdfef4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/web/inc/i18n.php b/web/inc/i18n.php
@@ -24,7 +24,7 @@ function _translate() {
 
     // Load language file (if not loaded yet)
     if (!isset($LANG[$l])) {
-        require_once($_SERVER['DOCUMENT_ROOT']."/inc/i18n/$l.php");
+        require_once($_SERVER['DOCUMENT_ROOT']."/inc/i18n/".basename($l).".php");
     }
 
     //if (!isset($LANG[$l][$key])) file_put_contents('/somewhere/something.log', "$key\n", FILE_APPEND);