Fixes #6596 improve language file editor input validation

tbrehm · tbrehm · commit 1d027303f4c2 · 2023-10-26T12:06:05.000+02:00
diff --git a/interface/web/admin/language_edit.php b/interface/web/admin/language_edit.php
@@ -64,6 +64,7 @@
 		$val = stripslashes($val);
 		$val = preg_replace('/(^|[^\\\\])((\\\\\\\\)*)"/', '$1$2\\"', $val);
 		$val = str_replace('$', '', $val);
+		if(!preg_match("/^[a-z0-9_]+$/", $key)) die('Invalid language file key.');
 		$file_content .= '$wb['."'$key'".'] = "'.$val.'";'."\n";
 		$msg = 'File saved.';
 	}

Original file line number	Diff line number	Diff line change
`@@ -64,6 +64,7 @@`
`64`	`64`	`$val = stripslashes($val);`
`65`	`65`	`$val = preg_replace('/(^\|[^\\\\])((\\\\\\\\)*)"/', '$1$2\\"', $val);`
`66`	`66`	`$val = str_replace('$', '', $val);`
	`67`	`+ if(!preg_match("/^[a-z0-9_]+$/", $key)) die('Invalid language file key.');`
`67`	`68`	`$file_content .= '$wb['."'$key'".'] = "'.$val.'";'."\n";`
`68`	`69`	`$msg = 'File saved.';`
`69`	`70`	`}`