WordPress.org
Get WordPress

Make WordPress Core

Opened 16 years ago

Closed 16 years ago

#11774 closed defect (bug) (fixed)

in ms-edit.php, WPLANG site option gets updated without any validation

Reported by: denis-de-bernardy's profile Denis-de-Bernardy Owned by: ryan's profile ryan
Milestone: 3.0 Priority: normal
Severity: normal Version: 3.0
Component: Security Keywords:
Focuses: multisite Cc:

Description

there is a line in there that goes:

update_site_option( "WPLANG", $_POST['WPLANG'] );

in addition to the missing sanitization, we should at least make sure the lang file is around.

Change History (2)

#1 @nacin
16 years ago

  • Keywords multisite added

#2 @ryan
16 years ago

  • Resolution set to fixed
  • Status changed from new to closed

(In [12946]) Introduce get_available_languages(). Validate WPLANG. fixes #11774

Note: See TracTickets for help on using tickets.