[svn r20282] Security improvements see FS#4152

main/exercice/hotspot_lang_conversion.php

@@ -33,15 +33,18 @@ $hotspot_lang_file = api_get_path(SYS_LANG_PATH);
 if(isset($_GET['lang'])) {
 	//$search = array('../','\\0','\\');
 	$lang = urldecode($_GET['lang']);
-	if (preg_match('/^[a-zA-Z0-9\._-]+$/', $lang)) {		
+	if (preg_match('/^[a-zA-Z0-9\._-]+$/', $lang)) {
 		//$lang = str_replace($search,$replace,urldecode($_GET['lang']));
 		if(file_exists($hotspot_lang_file . $lang . '/hotspot.inc.php'))
 			$hotspot_lang_file .= $lang . '/hotspot.inc.php';
 		else
 			$hotspot_lang_file .= 'english/hotspot.inc.php';
+	} else {
+		$hotspot_lang_file .= 'english/hotspot.inc.php';
 	}
-} else
+} else {
 	$hotspot_lang_file .= 'english/hotspot.inc.php';
+}
 
 $file = file($hotspot_lang_file);