-- Isaac Clerencia at Warp Networks, http://www.warp.es Work: <[EMAIL PROTECTED]> | Debian: <[EMAIL PROTECTED]>
Index: libraries/lib.inc.php
===================================================================
RCS file: /cvsroot/phppgadmin/webdb/libraries/lib.inc.php,v
retrieving revision 1.88.2.2
retrieving revision 1.88.2.5
diff -u -r1.88.2.2 -r1.88.2.5
--- libraries/lib.inc.php 18 Feb 2005 11:54:17 -0000 1.88.2.2
+++ libraries/lib.inc.php 15 Jul 2005 08:09:20 -0000 1.88.2.5
@@ -96,7 +97,8 @@
// If login action is set, then set session variables
if (isset($_POST['formServer']) && isset($_POST['formUsername']) &&
- isset($_POST['formPassword']) && isset($_POST['formLanguage'])) {
+ isset($_POST['formPassword']) && isset($_POST['formLanguage'])
+ && in_array($_POST['formLanguage'], array_keys($appLangFiles))) {
$_SESSION['webdbServerID'] = $_POST['formServer'];
$_SESSION['webdbUsername'] = $_POST['formUsername'];
$_SESSION['webdbPassword'] = $_POST['formPassword'];
pgpnRQ1Z1zJpd.pgp
Description: PGP signature
