Fix for possible file inclusion vulnerability in i18n.php

Fix for outroll#2052
myvesta · Aug 15, 2021 · 88596a8 · 88596a8
1 parent df11eaf
commit 88596a8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/web/inc/i18n.php b/web/inc/i18n.php
@@ -24,7 +24,7 @@ function _translate() {
 
     // Load language file (if not loaded yet)
     if (!isset($LANG[$l])) {
-        require_once($_SERVER['DOCUMENT_ROOT']."/inc/i18n/$l.php");
+        require_once($_SERVER['DOCUMENT_ROOT']."/inc/i18n/".basename($l).".php");
     }
 
     //if (!isset($LANG[$l][$key])) file_put_contents('/somewhere/something.log', "$key\n", FILE_APPEND);