piwigo / lexiglot

A translation platform for PHP projects developed in PHP.

A translation platform for PHP projects developed in PHP.

Secure your installation

• The application should not run on a shared server were users have shell access, to prevent SVN credentials leak from ps command
• You must disable remote access to api/update.php file, this file must only called from trusted sources (Cron task, SVN hook, etc.)
• You should disable remote access to local/ folder and update.log file if you host private projects

lexiglot's Issues

Fatal error get_magic_quotes_gpc at install

Hello
I try install and this error fault

PHP Fatal error: Uncaught Error: Call to undefined function get_magic_quotes_gpc() in ...\include\functions.inc.php:617
Stack trace:
#0 ...\install.php(95): fix_magic_quotes()
#1 {main}
thrown in ..\include\functions.inc.php on line 617

PHP 8.3.9rc1
PHP 8.2.15

Add security warnings

Add README to advise to prevent external access to

• api/update.php
• local/
• update.log

CSS on login page

CVE-2014-8944

Login with username a"><script>alert(1)</script>

Must check that we can't register with such login (stored CSS)

Generates invalid file with multilines

Sometimes the commit script generates invalid files with strings on multiple lines.

For instance http://piwigo.org/dev/changeset/30192/extensions/UserAdvManager/trunk/language
Line 37-38 has not been replaced, thus the file generates a parsing error.

Problem might be the function which search the end of the string in the lines bellow https://github.com/mistic100/Lexiglot/blob/master/admin/include/commit.full.php#L162-L166

I can't reproduce the bug.