admin.php: fix authentication bypass vulnerability

[jirafeau.git] / lib / lang.php

diff --git a/lib/lang.php b/lib/lang.php
index 225323f3ba67179e4cb3f3a3518196f19280c9d0..79e32d2fc7f4908528f9e7b8498a884992f9c856 100644 (file)
--- a/lib/lang.php
+++ b/lib/lang.php
@@ -21,6 +21,7 @@ global $languages_list;
 $languages_list = array ('auto' => 'Automatic',\r
                          'de'   => 'Deutsch',\r
                          'en'   => 'English',\r
+                         'hu'   => 'Magyar',\r
                          'fi'   => 'Suomi',\r
                          'fr'   => 'Français',\r
                          'it'   => 'Italiano',\r
@@ -36,7 +37,12 @@ function t ($text)
 \r
     /* Detect user's langage if we are in automatic mode. */\r
     if (strcmp ($cfg['lang'], 'auto') == 0)\r
-        $l = substr ($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2);\r
+    {\r
+        if (isset ($_SERVER['HTTP_ACCEPT_LANGUAGE']))\r
+            $l = substr ($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2);\r
+        else\r
+            $l = "en";\r
+    }\r
     else\r
         $l = $cfg['lang'];\r
 \r
@@ -74,7 +80,12 @@ function json_lang_generator ()
 \r
     /* Detect user's langage if we are in automatic mode. */\r
     if (strcmp ($cfg['lang'], 'auto') == 0)\r
-        $l = substr ($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2);\r
+    {\r
+        if (isset ($_SERVER['HTTP_ACCEPT_LANGUAGE']))\r
+            $l = substr ($_SERVER['HTTP_ACCEPT_LANGUAGE'], 0, 2);\r
+        else\r
+            $l = "en";\r
+    }\r
     else\r
         $l = $cfg['lang'];\r
 \r