Update of /cvsroot/phpmychat/phpMyChat-0.15/chat
In directory usw-pr-cvs1:/tmp/cvs-serv12012/chat
Modified Files:
users_popup_low.php3 users_popup.php3 tutorial_popup.php3
Log Message:
Fix a security issue
Index: users_popup_low.php3
===================================================================
RCS file: /cvsroot/phpmychat/phpMyChat-0.15/chat/users_popup_low.php3,v
retrieving revision 1.8
retrieving revision 1.9
diff -C2 -r1.8 -r1.9
*** users_popup_low.php3 2001/04/14 17:51:47 1.8
--- users_popup_low.php3 2001/04/16 12:24:29 1.9
***************
*** 64,80 ****
* Defines the language to be used
*/
! if (!dbSessionIsRegistered('lang'))
! {
! if (empty($lang)
! || !file_exists('./localization/' . $lang . '/chat.loc'))
! {
! $dbSessionVars['lang'] = '';
! include('./localization/languages.lib.' . C_EXTENSION);
! }
! else
! {
! $dbSessionVars['lang'] = $lang;
! }
! }
require('./localization/' . $dbSessionVars['lang'] . '/chat.loc');
$textDirection = (L_CHARSET == 'windows-1256') ? 'rtl' : 'ltr';
--- 64,70 ----
* Defines the language to be used
*/
! if ( !dbSessionIsRegistered('lang')
! || (isset($lang) && $dbSessionVars['lang'] != $lang))
! include('./localization/languages.lib.' . C_EXTENSION);
require('./localization/' . $dbSessionVars['lang'] . '/chat.loc');
$textDirection = (L_CHARSET == 'windows-1256') ? 'rtl' : 'ltr';
Index: users_popup.php3
===================================================================
RCS file: /cvsroot/phpmychat/phpMyChat-0.15/chat/users_popup.php3,v
retrieving revision 1.8
retrieving revision 1.9
diff -C2 -r1.8 -r1.9
*** users_popup.php3 2001/04/14 17:51:47 1.8
--- users_popup.php3 2001/04/16 12:24:29 1.9
***************
*** 63,79 ****
* Defines the language to be used
*/
! if (!dbSessionIsRegistered('lang'))
! {
! if (empty($lang)
! || !file_exists('./localization/' . $lang . '/chat.loc'))
! {
! $dbSessionVars['lang'] = '';
! include('./localization/languages.lib.' . C_EXTENSION);
! }
! else
! {
! $dbSessionVars['lang'] = $lang;
! }
! }
require('./localization/' . $dbSessionVars['lang'] . '/chat.loc');
$textDirection = (L_CHARSET == 'windows-1256') ? 'rtl' : 'ltr';
--- 63,69 ----
* Defines the language to be used
*/
! if ( !dbSessionIsRegistered('lang')
! || (isset($lang) && $dbSessionVars['lang'] != $lang))
! include('./localization/languages.lib.' . C_EXTENSION);
require('./localization/' . $dbSessionVars['lang'] . '/chat.loc');
$textDirection = (L_CHARSET == 'windows-1256') ? 'rtl' : 'ltr';
Index: tutorial_popup.php3
===================================================================
RCS file: /cvsroot/phpmychat/phpMyChat-0.15/chat/tutorial_popup.php3,v
retrieving revision 1.2
retrieving revision 1.3
diff -C2 -r1.2 -r1.3
*** tutorial_popup.php3 2001/04/10 16:58:34 1.2
--- tutorial_popup.php3 2001/04/16 12:24:29 1.3
***************
*** 45,54 ****
* Defines the translation to be used
*/
! if (empty($lang)
! || !file_exists('./localization/' . $lang . '/tutorial.loc'))
! {
! $lang = '';
! include('./localization/tutorial.lib.' . C_EXTENSION);
! }
/**
--- 45,49 ----
* Defines the translation to be used
*/
! require('./localization/tutorial.lib.' . C_EXTENSION);
/**
|
