Nemcio/VestaCP
1
0
Fork 0
mirror of https://github.com/serghey-rodin/vesta.git synced 2026-07-19 23:50:37 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix for possible file inclusion vulnerability in i18n.php

Browse Source
This commit is contained in:
Anton Reutov
2021-08-16 12:36:08 +03:00
committed by GitHub
parent df9377519e
commit 6fdfef4e88
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
web/inc/i18n.php
View File

@@ -24,7 +24,7 @@ function _translate() {
// Load language file (if not loaded yet)
if (!isset($LANG[$l])) {
require_once($_SERVER['DOCUMENT_ROOT']."/inc/i18n/$l.php");
require_once($_SERVER['DOCUMENT_ROOT']."/inc/i18n/".basename($l).".php");
}
//if (!isset($LANG[$l][$key])) file_put_contents('/somewhere/something.log', "$key\n", FILE_APPEND);