From bc93e68dc7ec5181e931816ae34f9cc6bceb1b90 Mon Sep 17 00:00:00 2001
From: Lukas Fleischer <archlinux@cryptocrack.de>
Date: Tue, 13 May 2014 14:19:55 +0200
Subject: Set language using a POST request

Fixes FS#39027.

Signed-off-by: Lukas Fleischer <archlinux@cryptocrack.de>
---
 web/lib/translator.inc.php | 4 ++--
 web/template/header.php    | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

(limited to 'web')

diff --git a/web/lib/translator.inc.php b/web/lib/translator.inc.php
index 1070183..5117b99 100644
--- a/web/lib/translator.inc.php
+++ b/web/lib/translator.inc.php
@@ -79,10 +79,10 @@ function set_lang() {
 	global $streamer, $l10n;
 
 	$update_cookie = 0;
-	if (isset($_REQUEST['setlang'])) {
+	if (isset($_POST['setlang'])) {
 		# visitor is requesting a language change
 		#
-		$LANG = $_REQUEST['setlang'];
+		$LANG = $_POST['setlang'];
 		$update_cookie = 1;
 
 	} elseif (isset($_COOKIE['AURLANG'])) {
diff --git a/web/template/header.php b/web/template/header.php
index 9cefedc..df83995 100644
--- a/web/template/header.php
+++ b/web/template/header.php
@@ -32,7 +32,7 @@
 
 		<div id="content">
 			<div id="lang_sub">
-				<form method="get" action="<?= htmlspecialchars($_SERVER["REQUEST_URI"], ENT_QUOTES) ?>">
+				<form method="post" action="<?= htmlspecialchars($_SERVER["REQUEST_URI"], ENT_QUOTES) ?>">
 					<fieldset>
 						<div>
 							<select name="setlang" id="id_setlang">
-- 
cgit v1.2.3-70-g09d2