modules/navigation: Fixed code injection vulnerability

2026-05-07 21:07:07 +02:00 · 2021-07-31 16:40:03 +02:00
parent 4905db80ce
commit 86011d4a26
9 changed files with 91 additions and 104 deletions
--- a/inc/modules/navigation/Site.php
+++ b/inc/modules/navigation/Site.php
@@ -29,6 +29,7 @@ class Site extends SiteModule
        $homepage = $this->settings('settings', 'homepage');

        $lang_prefix = $this->core->lang['name'];
+
        if ($lang_prefix != $this->settings('settings', 'lang_site')) {
            $lang_prefix = explode('_', $lang_prefix)[0];
        } else {
@@ -98,6 +99,7 @@ class Site extends SiteModule
                }
            }
        }
+
        return false;
    }
 }