From caf97b016eac99a8329bd19301ef6bb7f736a794 Mon Sep 17 00:00:00 2001
From: Lars Gebhardt-Kusche <lars@kusche.berlin>
Date: Tue, 25 Nov 2025 03:24:45 +0100
Subject: [PATCH] as

---
 config/staging/fileload.php | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/config/staging/fileload.php b/config/staging/fileload.php
index 0132667..cb45699 100644
--- a/config/staging/fileload.php
+++ b/config/staging/fileload.php
@@ -28,6 +28,15 @@ if (php_sapi_name() !== 'cli') {
 // 1) Sprache bestimmen (vor dem Laden der JSON-Dateien!)
 // -----------------------------------------------------------
 $lang = $_GET['lang'] ?? null;
+
+if (is_string($lang)) {
+    $lang = strtolower($lang);
+    if (!preg_match('/^[a-z]{2}$/', $lang)) {
+        $lang = null;
+    }
+} else {
+    $lang = null;
+}
 $lang = strtolower($lang);
 
 if (!preg_match('/^[a-z]{2}$/', $lang)) {