Update of /cvsroot/phpmychat/phpMyChat - 0.14/chat/localization
In directory usw-pr-cvs1:/tmp/cvs-serv13099/chat/localization
Modified Files:
admin.lib.php3 languages.lib.php3 tutorial.lib.php3
Log Message:
Fix a big security hole
***** Bogus filespec: -
***** Bogus filespec: 0.14/chat/localization
Index: admin.lib.php3
===================================================================
RCS file: /cvsroot/phpmychat/phpMyChat - 0.14/chat/localization/admin.lib.php3,v
retrieving revision 1.3
retrieving revision 1.4
diff -C2 -r1.3 -r1.4
*** admin.lib.php3 2001/04/20 17:04:55 1.3
--- admin.lib.php3 2001/05/31 18:06:30 1.4
***************
*** 42,46 ****
$HTTP_USER_AGENT = getenv("HTTP_USER_AGENT");
! if (isset($CookieLang) && file_exists("./localization/${L}/localized.admin.php3"))
{
$L = $CookieLang;
--- 42,48 ----
$HTTP_USER_AGENT = getenv("HTTP_USER_AGENT");
! if (isset($CookieLang)
! && is_dir('./localization/'.$CookieLang)
! && file_exists("./localization/$CookieLang/localized.admin.php3"))
{
$L = $CookieLang;
Index: languages.lib.php3
===================================================================
RCS file: /cvsroot/phpmychat/phpMyChat - 0.14/chat/localization/languages.lib.php3,v
retrieving revision 1.3
retrieving revision 1.4
diff -C2 -r1.3 -r1.4
*** languages.lib.php3 2001/04/20 17:04:55 1.3
--- languages.lib.php3 2001/05/31 18:06:30 1.4
***************
*** 45,52 ****
$HTTP_USER_AGENT = getenv("HTTP_USER_AGENT");
! if ((isset($L) && $L != "") || C_MULTI_LANG == 0)
{
}
! elseif (isset($CookieLang) && file_exists('./'.$ChatPath.'localization/'.$CookieLang.'/localized.chat.php3'))
{
$L = $CookieLang;
--- 45,54 ----
$HTTP_USER_AGENT = getenv("HTTP_USER_AGENT");
! if ((isset($L) && $L != "" && is_dir('./'.$ChatPath.'localization/'.$L)) || C_MULTI_LANG == 0)
{
}
! elseif (isset($CookieLang)
! && is_dir('./'.$ChatPath.'localization/'.$CookieLang)
! && file_exists('./'.$ChatPath.'localization/'.$CookieLang.'/localized.chat.php3'))
{
$L = $CookieLang;
Index: tutorial.lib.php3
===================================================================
RCS file: /cvsroot/phpmychat/phpMyChat - 0.14/chat/localization/tutorial.lib.php3,v
retrieving revision 1.3
retrieving revision 1.4
diff -C2 -r1.3 -r1.4
*** tutorial.lib.php3 2001/04/20 17:04:55 1.3
--- tutorial.lib.php3 2001/05/31 18:06:30 1.4
***************
*** 42,46 ****
$HTTP_USER_AGENT = getenv("HTTP_USER_AGENT");
! if (isset($CookieLang) && file_exists("./localization/${CookieLang}/localized.tutorial.php3"))
{
$L = $CookieLang;
--- 42,48 ----
$HTTP_USER_AGENT = getenv("HTTP_USER_AGENT");
! if (isset($CookieLang)
! && is_dir('./localization/'.$CookieLang)
! && file_exists("./localization/${CookieLang}/localized.tutorial.php3"))
{
$L = $CookieLang;
|