Browse Source

Avoid possible local file inclusion - see Webrevisor report 201012

Yannick Warnier 14 years ago
parent
commit
a66d356470
1 changed files with 1 additions and 1 deletions
  1. 1 1
      main/auth/inscription.php

+ 1 - 1
main/auth/inscription.php

@@ -48,7 +48,7 @@ if (api_get_setting('allow_terms_conditions') == 'true') {
     }
 }
 
-$tool_name = get_lang('Registration',null,(!empty($_POST['language'])?$_POST['language']:$_user['language']));
+$tool_name = get_lang('Registration',null,(!empty($_POST['language'])?api_get_valid_language($_POST['language']):$_user['language']));
 Display :: display_header($tool_name);
 
 echo '<div class="actions-title">';