[phpMyChat CVS] CVS: phpMyChat - 0.14/chat/localization admin.lib.php3,1.3,1.4 languages.lib.php3,1.3,1.4 tutorial.lib.php3,1.3,1.4

[Lo?c C. <lo...@us...>]

Update of /cvsroot/phpmychat/phpMyChat - 0.14/chat/localization
In directory usw-pr-cvs1:/tmp/cvs-serv13099/chat/localization

Modified Files:
	admin.lib.php3 languages.lib.php3 tutorial.lib.php3 
Log Message:
Fix a big security hole

***** Bogus filespec: -
***** Bogus filespec: 0.14/chat/localization
Index: admin.lib.php3
===================================================================
RCS file: /cvsroot/phpmychat/phpMyChat - 0.14/chat/localization/admin.lib.php3,v
retrieving revision 1.3
retrieving revision 1.4
diff -C2 -r1.3 -r1.4
*** admin.lib.php3	2001/04/20 17:04:55	1.3
--- admin.lib.php3	2001/05/31 18:06:30	1.4
***************
*** 42,46 ****
  	$HTTP_USER_AGENT = getenv("HTTP_USER_AGENT");
  
! if (isset($CookieLang) && file_exists("./localization/${L}/localized.admin.php3"))
  {
  	$L = $CookieLang;
--- 42,48 ----
  	$HTTP_USER_AGENT = getenv("HTTP_USER_AGENT");
  
! if (isset($CookieLang)
! 	&& is_dir('./localization/'.$CookieLang)
! 	&& file_exists("./localization/$CookieLang/localized.admin.php3"))
  {
  	$L = $CookieLang;

Index: languages.lib.php3
===================================================================
RCS file: /cvsroot/phpmychat/phpMyChat - 0.14/chat/localization/languages.lib.php3,v
retrieving revision 1.3
retrieving revision 1.4
diff -C2 -r1.3 -r1.4
*** languages.lib.php3	2001/04/20 17:04:55	1.3
--- languages.lib.php3	2001/05/31 18:06:30	1.4
***************
*** 45,52 ****
  	$HTTP_USER_AGENT = getenv("HTTP_USER_AGENT");
  
! if ((isset($L) && $L != "") || C_MULTI_LANG == 0)
  {
  }	
! elseif (isset($CookieLang) && file_exists('./'.$ChatPath.'localization/'.$CookieLang.'/localized.chat.php3'))
  {
  	$L = $CookieLang;
--- 45,54 ----
  	$HTTP_USER_AGENT = getenv("HTTP_USER_AGENT");
  
! if ((isset($L) && $L != "" && is_dir('./'.$ChatPath.'localization/'.$L)) || C_MULTI_LANG == 0)
  {
  }	
! elseif (isset($CookieLang)
! 		&& is_dir('./'.$ChatPath.'localization/'.$CookieLang)
! 		&& file_exists('./'.$ChatPath.'localization/'.$CookieLang.'/localized.chat.php3'))
  {
  	$L = $CookieLang;

Index: tutorial.lib.php3
===================================================================
RCS file: /cvsroot/phpmychat/phpMyChat - 0.14/chat/localization/tutorial.lib.php3,v
retrieving revision 1.3
retrieving revision 1.4
diff -C2 -r1.3 -r1.4
*** tutorial.lib.php3	2001/04/20 17:04:55	1.3
--- tutorial.lib.php3	2001/05/31 18:06:30	1.4
***************
*** 42,46 ****
  	$HTTP_USER_AGENT = getenv("HTTP_USER_AGENT");
  
! if (isset($CookieLang) && file_exists("./localization/${CookieLang}/localized.tutorial.php3"))
  {
  	$L = $CookieLang;
--- 42,48 ----
  	$HTTP_USER_AGENT = getenv("HTTP_USER_AGENT");
  
! if (isset($CookieLang)
! 	&& is_dir('./localization/'.$CookieLang)
! 	&& file_exists("./localization/${CookieLang}/localized.tutorial.php3"))
  {
  	$L = $CookieLang;