From 702ac0ce02b3ebcc203237aa9680023a214e2d60 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Petr=20S=CC=8Ckoda?= <commits@skodak.org>
Date: Sun, 9 Dec 2012 11:28:36 +0100
Subject: [PATCH] MDL-37061 always validate lang when setting session user

This should resolve problems with TinyMCE langs and some unknown MUCH caching issue.
---
 lib/sessionlib.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/lib/sessionlib.php b/lib/sessionlib.php
index be15e142d4b..b40927d776e 100644
--- a/lib/sessionlib.php
+++ b/lib/sessionlib.php
@@ -1069,6 +1069,10 @@ function get_moodle_cookie() {
 function session_set_user($user) {
     $_SESSION['USER'] = $user;
     unset($_SESSION['USER']->description); // conserve memory
+    if (isset($_SESSION['USER']->lang)) {
+        // Make sure it is a valid lang pack name.
+        $_SESSION['USER']->lang = clean_param($_SESSION['USER']->lang, PARAM_LANG);
+    }
     sesskey(); // init session key
 
     if (PHPUNIT_TEST) {