-- 
Isaac Clerencia at Warp Networks, http://www.warp.es
Work: <[EMAIL PROTECTED]>   | Debian: <[EMAIL PROTECTED]>
Index: libraries/lib.inc.php
===================================================================
RCS file: /cvsroot/phppgadmin/webdb/libraries/lib.inc.php,v
retrieving revision 1.88.2.2
retrieving revision 1.88.2.5
diff -u -r1.88.2.2 -r1.88.2.5
--- libraries/lib.inc.php	18 Feb 2005 11:54:17 -0000	1.88.2.2
+++ libraries/lib.inc.php	15 Jul 2005 08:09:20 -0000	1.88.2.5
@@ -96,7 +97,8 @@
 	
 	// If login action is set, then set session variables
 	if (isset($_POST['formServer']) && isset($_POST['formUsername']) && 
-		isset($_POST['formPassword']) && isset($_POST['formLanguage'])) {
+		isset($_POST['formPassword']) && isset($_POST['formLanguage'])
+			&& in_array($_POST['formLanguage'], array_keys($appLangFiles))) {
 		$_SESSION['webdbServerID'] = $_POST['formServer'];
 		$_SESSION['webdbUsername'] = $_POST['formUsername'];
 		$_SESSION['webdbPassword'] = $_POST['formPassword'];

Attachment: pgplcOKpchJFc.pgp
Description: PGP signature



Reply via email to