mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-08-09 10:13:00 +02:00
fixes GHSA-rr39-mf4j-6594 prevent displaying RAW cookie content
This commit is contained in:
@@ -1057,7 +1057,7 @@ function log_user($user_id, $remember_me)
|
||||
{
|
||||
if (!array_key_exists($_COOKIE['lang'], get_languages()))
|
||||
{
|
||||
fatal_error('[Hacking attempt] the input parameter "'.$_COOKIE['lang'].'" is not valid');
|
||||
fatal_error('[Hacking attempt] the input parameter "'.htmlspecialchars($_COOKIE['lang']).'" is not valid');
|
||||
}
|
||||
|
||||
single_update(
|
||||
|
||||
Reference in New Issue
Block a user