Bugtraq mailing list archives
Re: PHP-Nuke <= 8.0 Cookie Manipulation (lang)
From: Paul Laudanski <paul () castlecops com>
Date: Sun, 11 Mar 2007 15:50:09 -0400
programmer () serbiansite com wrote:
Building on your patch you'd want to incorporate basename(). You never want to accept directory traversal attempts into variables.Patch: } elseif (isset($lang)) { if (eregi('[A-Za-z]', $lang)) { if (file_exists("language/lang-".$lang.".php")) { include_once("language/lang-".$lang.".php"); $currentlang = $lang; }else { include_once("language/lang-english.php"); $currentlang = "english";} }else {include_once("language/lang-english.php"); $currentlang = "english"; } } else { ///////////////////////////////////////////////////////////////////////////////////////////////// Best Regards Aleksandar Programmer and Web Developer ///////////////////////////////////////////////////////////////////////////////////////////////
Paul Laudanski, CastleCops http://www.linkedin.com/pub/1/49a/17b Submit Phish: www.castlecops.com/pirt www.castlecops.com | de.castlecops.com | wiki.castlecops.com
Current thread:
- PHP-Nuke <= 8.0 Cookie Manipulation (lang) programmer (Mar 10)
- Re: PHP-Nuke <= 8.0 Cookie Manipulation (lang) Paul Laudanski (Mar 12)