admin.php: fix authentication bypass vulnerability

[jirafeau.git] / lib / lang.php

diff --git a/lib/lang.php b/lib/lang.php
index 79387366c8f102372e094bf5d8a885667affa73d..79e32d2fc7f4908528f9e7b8498a884992f9c856 100644 (file)
--- a/lib/lang.php
+++ b/lib/lang.php
@@ -14,14 +14,20 @@
  *  GNU Affero General Public License for more details.\r
  *\r
  *  You should have received a copy of the GNU Affero General Public License\r
- *  along with this program.  If not, see <http://www.gnu.org/licenses/>.\r
+ *  along with this program.  If not, see <https://www.gnu.org/licenses/>.\r
  */\r
 \r
- global $languages_list;\r
- $languages_list = array ('auto' => 'Automatic',\r
-                          'de' => 'Deutsch',\r
-                          'en' => 'English',\r
-                          'fr' => 'Français');\r
+global $languages_list;\r
+$languages_list = array ('auto' => 'Automatic',\r
+                         'de'   => 'Deutsch',\r
+                         'en'   => 'English',\r
+                         'hu'   => 'Magyar',\r
+                         'fi'   => 'Suomi',\r
+                         'fr'   => 'Français',\r
+                         'it'   => 'Italiano',\r
+                         'nl'   => 'Nederlands',\r
+                         'ro'   => 'Limba română',\r
+                         'sk'   => 'Slovenčina');\r
 \r
 /* Translation */\r
 function t ($text)\r
@@ -31,7 +37,12 @@ function t ($text)
 \r
     /* Detect user's langage if we are in automatic mode. */\r
     if (strcmp ($cfg['lang'], 'auto') == 0)\r
-        $l = substr ($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2);\r
+    {\r
+        if (isset ($_SERVER['HTTP_ACCEPT_LANGUAGE']))\r
+            $l = substr ($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2);\r
+        else\r
+            $l = "en";\r
+    }\r
     else\r
         $l = $cfg['lang'];\r
 \r
@@ -62,4 +73,35 @@ function t ($text)
     return $trans[$text];\r
 }\r
 \r
+function json_lang_generator ()\r
+{\r
+    $cfg = $GLOBALS['cfg'];\r
+    $languages_list = $GLOBALS['languages_list'];\r
+\r
+    /* Detect user's langage if we are in automatic mode. */\r
+    if (strcmp ($cfg['lang'], 'auto') == 0)\r
+    {\r
+        if (isset ($_SERVER['HTTP_ACCEPT_LANGUAGE']))\r
+            $l = substr ($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2);\r
+        else\r
+            $l = "en";\r
+    }\r
+    else\r
+        $l = $cfg['lang'];\r
+\r
+    /* Is the langage in the list ? */\r
+    $found = false;\r
+    foreach ($languages_list as $key => $v)\r
+        if (strcmp ($l, $key) == 0)\r
+            $found = true;\r
+\r
+    /* Don't translate english. */\r
+    if (!($found && strcmp ($l, "en")))\r
+        return "{}";\r
+\r
+    /* Open translation file. */\r
+    $trans_j = file_get_contents (JIRAFEAU_ROOT . "lib/locales/$l.json");\r
+    return $trans_j; \r
+}\r
+\r
 ?>\r