-- Isaac Clerencia at Warp Networks, http://www.warp.es Work: <[EMAIL PROTECTED]> | Debian: <[EMAIL PROTECTED]>
Index: libraries/lib.inc.php =================================================================== RCS file: /cvsroot/phppgadmin/webdb/libraries/lib.inc.php,v retrieving revision 1.88.2.2 retrieving revision 1.88.2.5 diff -u -r1.88.2.2 -r1.88.2.5 --- libraries/lib.inc.php 18 Feb 2005 11:54:17 -0000 1.88.2.2 +++ libraries/lib.inc.php 15 Jul 2005 08:09:20 -0000 1.88.2.5 @@ -96,7 +97,8 @@ // If login action is set, then set session variables if (isset($_POST['formServer']) && isset($_POST['formUsername']) && - isset($_POST['formPassword']) && isset($_POST['formLanguage'])) { + isset($_POST['formPassword']) && isset($_POST['formLanguage']) + && in_array($_POST['formLanguage'], array_keys($appLangFiles))) { $_SESSION['webdbServerID'] = $_POST['formServer']; $_SESSION['webdbUsername'] = $_POST['formUsername']; $_SESSION['webdbPassword'] = $_POST['formPassword'];
pgplcOKpchJFc.pgp
Description: PGP signature