diff --git a/classes/context/Context.class.php b/classes/context/Context.class.php index bbd61953a..9dde027fd 100644 --- a/classes/context/Context.class.php +++ b/classes/context/Context.class.php @@ -317,13 +317,14 @@ class Context $lang->loadDirectory(RX_BASEDIR . 'common/lang', 'common'); $lang->loadDirectory(RX_BASEDIR . 'modules/module/lang', 'module'); self::setLangType(self::$_instance->lang_type = $lang_type); - self::set('lang', self::$_instance->lang = $lang); // Set global variables for backward compatibility. $GLOBALS['oContext'] = self::$_instance; $GLOBALS['__Context__'] = &self::$_user_vars; $GLOBALS['_time_zone'] = config('locale.default_timezone'); $GLOBALS['lang'] = &$lang; + self::$_user_vars->lang = $lang; + self::$_instance->lang = $lang; // set session handler if(self::isInstalled() && config('session.use_db')) @@ -1488,9 +1489,18 @@ class Context } foreach($val as $_key => $_val) { - if(is_array($_val)) + if($is_array) { - $_val = self::_filterRequestVar($key, $_val); + if(in_array($key, array('mid', 'vid', 'act', 'module'))) + { + self::$_instance->security_check = 'DENY ALL'; + self::$_instance->security_check_detail = 'ERR_UNSAFE_VAR'; + $_val = null; + } + else + { + $_val = self::_filterRequestVar($key, $_val); + } } elseif($_val = trim($_val)) { diff --git a/classes/display/HTMLDisplayHandler.php b/classes/display/HTMLDisplayHandler.php index d2263caf4..0246c3a87 100644 --- a/classes/display/HTMLDisplayHandler.php +++ b/classes/display/HTMLDisplayHandler.php @@ -105,7 +105,7 @@ class HTMLDisplayHandler 'dispPageAdminMobileContentModify' => true, 'dispPageAdminMobileContent' => true, ); - $current_act = Context::get('act') ?? ''; + $current_act = strval(Context::get('act')); if(Context::get('module') != 'admin' && strpos($current_act, 'Admin') !== false && !isset($x_exclude_actions[$current_act])) { $output = '
{$lang->about_mobile_view}
{$lang->about_mobile_viewport} {$lang->restore_default_viewport}
{$lang->about_debug_log_filename}
{$lang->about_mediafilter_whitelist}
{$lang->about_mediafilter_classes}
{$lang->about_robot_user_agents}
{$lang->about_seo_main_title}
{$lang->about_seo_subpage_title}
{$lang->about_seo_document_title}
{$lang->about_site_meta_keywords}
{$lang->about_site_meta_description}
{$lang->about_header_text}
{$lang->about_mobile_view}