From: Lo?c C. <lo...@us...> - 2001-04-16 12:24:33
|
Update of /cvsroot/phpmychat/phpMyChat-0.15/chat In directory usw-pr-cvs1:/tmp/cvs-serv12012/chat Modified Files: users_popup_low.php3 users_popup.php3 tutorial_popup.php3 Log Message: Fix a security issue Index: users_popup_low.php3 =================================================================== RCS file: /cvsroot/phpmychat/phpMyChat-0.15/chat/users_popup_low.php3,v retrieving revision 1.8 retrieving revision 1.9 diff -C2 -r1.8 -r1.9 *** users_popup_low.php3 2001/04/14 17:51:47 1.8 --- users_popup_low.php3 2001/04/16 12:24:29 1.9 *************** *** 64,80 **** * Defines the language to be used */ ! if (!dbSessionIsRegistered('lang')) ! { ! if (empty($lang) ! || !file_exists('./localization/' . $lang . '/chat.loc')) ! { ! $dbSessionVars['lang'] = ''; ! include('./localization/languages.lib.' . C_EXTENSION); ! } ! else ! { ! $dbSessionVars['lang'] = $lang; ! } ! } require('./localization/' . $dbSessionVars['lang'] . '/chat.loc'); $textDirection = (L_CHARSET == 'windows-1256') ? 'rtl' : 'ltr'; --- 64,70 ---- * Defines the language to be used */ ! if ( !dbSessionIsRegistered('lang') ! || (isset($lang) && $dbSessionVars['lang'] != $lang)) ! include('./localization/languages.lib.' . C_EXTENSION); require('./localization/' . $dbSessionVars['lang'] . '/chat.loc'); $textDirection = (L_CHARSET == 'windows-1256') ? 'rtl' : 'ltr'; Index: users_popup.php3 =================================================================== RCS file: /cvsroot/phpmychat/phpMyChat-0.15/chat/users_popup.php3,v retrieving revision 1.8 retrieving revision 1.9 diff -C2 -r1.8 -r1.9 *** users_popup.php3 2001/04/14 17:51:47 1.8 --- users_popup.php3 2001/04/16 12:24:29 1.9 *************** *** 63,79 **** * Defines the language to be used */ ! if (!dbSessionIsRegistered('lang')) ! { ! if (empty($lang) ! || !file_exists('./localization/' . $lang . '/chat.loc')) ! { ! $dbSessionVars['lang'] = ''; ! include('./localization/languages.lib.' . C_EXTENSION); ! } ! else ! { ! $dbSessionVars['lang'] = $lang; ! } ! } require('./localization/' . $dbSessionVars['lang'] . '/chat.loc'); $textDirection = (L_CHARSET == 'windows-1256') ? 'rtl' : 'ltr'; --- 63,69 ---- * Defines the language to be used */ ! if ( !dbSessionIsRegistered('lang') ! || (isset($lang) && $dbSessionVars['lang'] != $lang)) ! include('./localization/languages.lib.' . C_EXTENSION); require('./localization/' . $dbSessionVars['lang'] . '/chat.loc'); $textDirection = (L_CHARSET == 'windows-1256') ? 'rtl' : 'ltr'; Index: tutorial_popup.php3 =================================================================== RCS file: /cvsroot/phpmychat/phpMyChat-0.15/chat/tutorial_popup.php3,v retrieving revision 1.2 retrieving revision 1.3 diff -C2 -r1.2 -r1.3 *** tutorial_popup.php3 2001/04/10 16:58:34 1.2 --- tutorial_popup.php3 2001/04/16 12:24:29 1.3 *************** *** 45,54 **** * Defines the translation to be used */ ! if (empty($lang) ! || !file_exists('./localization/' . $lang . '/tutorial.loc')) ! { ! $lang = ''; ! include('./localization/tutorial.lib.' . C_EXTENSION); ! } /** --- 45,49 ---- * Defines the translation to be used */ ! require('./localization/tutorial.lib.' . C_EXTENSION); /** |