A rather large and important update:

revised most of the SQL queries and tried to make drupal as secure as possible (while trying to avoid redundant/duplicate checks).  For drupal's sake, try to screw something up.  See the mail about PHPNuke being hacked appr. 6 days ago.  The one who finds a problem is rewarded a beer (and I'm willing to ship it to Norway if required).  I beg you to be evil.  Try dumping a table a la "http://localhost/index.php?date=77778;DROP TABLE users" or something. ;)

1 files changed, 3 insertions, 3 deletions

diff --git a/modules/locale/locale.module b/modules/locale/locale.module
index 464b3bc41..c96d9a0dc 100644
--- a/modules/locale/locale.module
+++ b/modules/locale/locale.module
@@ -84,17 +84,17 @@ function locale_admin() {
 
   switch ($op) {
     case "delete":
-      locale_delete($id);
+      locale_delete(check_input($id));
       locale_display();
       break;
     case "help":
       locale_help();
       break;
     case "edit":
-      locale_edit($id);
+      locale_edit(check_input($id));
       break;
     case "Save translations":
-      locale_save($id, $edit);
+      locale_save(check_input($id), $edit);
       // fall through
     default:
       locale_display();