@@ -, +, @@ $page->translated_content sub translated_content { my ( $self, $lang ) = @_; +warn "L137: $lang"; /cgi-bin/koha/opac-page.pl?page_id=5&language=badsql --- opac/opac-page.pl | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- a/opac/opac-page.pl +++ a/opac/opac-page.pl @@ -35,7 +35,6 @@ my ( $template, $borrowernumber, $cookie ) = get_template_and_user( ); my $page_id = $query->param('page_id'); -my $lang = $query->param('language'); my $homebranch = $ENV{OPAC_BRANCH_DEFAULT}; if (C4::Context->userenv) { @@ -49,7 +48,8 @@ if ( !$page || $page->category ne 'pages' || $page->branchcode && $page->branchc exit; } -my $content = $page->translated_content( $lang || C4::Languages::getlanguage($query) ); +# Sanitize $query->param('language') via getlanguage +my $content = $page->translated_content( C4::Languages::getlanguage($query) ); $template->param( page => $content ); --