From b62ff9fa11f0dbed1a28568671eb31d45a5363dd Mon Sep 17 00:00:00 2001 From: Robert Treat Date: Wed, 17 Dec 2008 23:59:17 -0500 Subject: [PATCH] unset $_language in case of malicious entry via url w/ register_globals. --- libraries/lib.inc.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/libraries/lib.inc.php b/libraries/lib.inc.php index d425dc15..fe2d9e6c 100644 --- a/libraries/lib.inc.php +++ b/libraries/lib.inc.php @@ -95,6 +95,8 @@ } // Determine language file to import: + unset($_language); + // 1. Check for the language from a request var if (isset($_REQUEST['language']) && isset($appLangFiles[$_REQUEST['language']])) $_language = $_REQUEST['language']; -- 2.39.5