From f2a9b2faec10094514c16ea2c3539f910dc2bc62 Mon Sep 17 00:00:00 2001 From: tbrehm <t.brehm@ispconfig.org> Date: Wed, 04 Sep 2013 05:26:33 -0400 Subject: [PATCH] - Added warning message to language import script. - Added switch to disable import function in config.inc.php - Merged language files. --- interface/web/admin/language_import.php | 4 +++- 1 files changed, 3 insertions(+), 1 deletions(-) diff --git a/interface/web/admin/language_import.php b/interface/web/admin/language_import.php index 443bdea..c25406a 100644 --- a/interface/web/admin/language_import.php +++ b/interface/web/admin/language_import.php @@ -117,6 +117,8 @@ if(!$app->auth->is_admin()) die('only allowed for administrators.'); if($conf['demo_mode'] == true) $app->error('This function is disabled in demo mode.'); +if(!$conf['language_file_import_enabled']) $app->error('Languge import function is disabled in the interface config.inc.php file.'); + $app->uses('tpl'); $app->tpl->newTemplate('form.tpl.htm'); @@ -159,7 +161,7 @@ $file_name = trim($parts[3]); if(!preg_match("/^[a-z]{2}$/i", $selected_language)) die("unallowed characters in selected language name: $selected_language"); if(!preg_match("/^[a-z_]+$/i", $module_name)) die('unallowed characters in module name.'); - if(!preg_match("/^[a-z\._]+$/i", $file_name) || stristr($file_name,'..')) die("unallowed characters in language file name: '$file_name'"); + if(!preg_match("/^[a-z\._\-]+$/i", $file_name) || stristr($file_name,'..')) die("unallowed characters in language file name: '$file_name'"); if($module_name == 'global') { $langfile_path = trim(ISPC_LIB_PATH."/lang/".$selected_language.".lng"); } else { -- Gitblit v1.9.1