diff --git a/lam/templates/login.php b/lam/templates/login.php index 1b09b596..b438a9e9 100644 --- a/lam/templates/login.php +++ b/lam/templates/login.php @@ -114,7 +114,7 @@ else { $_SESSION['language'] = 'en_GB.utf8:UTF-8:English (Great Britain)'; } if (isset($_POST['language'])) { - $_SESSION['language'] = $_POST['language']; // Write selected language in session + $_SESSION['language'] = htmlspecialchars($_POST['language']); // Write selected language in session } $current_language = explode(":",$_SESSION['language']); $_SESSION['header'] = "\n\n";