Explorar o código

Avoid possible local file inclusion - see Webrevisor report 201012

Yannick Warnier %!s(int64=14) %!d(string=hai) anos
pai
achega
a66d356470
Modificáronse 1 ficheiros con 1 adicións e 1 borrados
  1. 1 1
      main/auth/inscription.php

+ 1 - 1
main/auth/inscription.php

@@ -48,7 +48,7 @@ if (api_get_setting('allow_terms_conditions') == 'true') {
     }
 }
 
-$tool_name = get_lang('Registration',null,(!empty($_POST['language'])?$_POST['language']:$_user['language']));
+$tool_name = get_lang('Registration',null,(!empty($_POST['language'])?api_get_valid_language($_POST['language']):$_user['language']));
 Display :: display_header($tool_name);
 
 echo '<div class="actions-title">';