[svn r10722] Improved security filtering

19 years ago · 2b7ea22ea6
parent ee57c3f01e
commit 2b7ea22ea6
1 changed files with 1 additions and 1 deletions
--- a/main/exercice/hotspot_lang_conversion.php
+++ b/main/exercice/hotspot_lang_conversion.php
@ -5,7 +5,7 @@ $hotspot_lang_file = api_get_path(SYS_LANG_PATH);

 if(isset($_GET['lang']))
 {
-	$lang = str_replace('../','',urldecode($_GET['lang']));
+	$lang = str_replace('../','',str_replace('\\0','',urldecode($_GET['lang'])));
 	if(file_exists($hotspot_lang_file . $lang . '/hotspot.inc.php'))
 		$hotspot_lang_file .= $lang . '/hotspot.inc.php';
 	else