What are the potential pitfalls when trying to set a session variable for language selection in PHP?

When setting a session variable for language selection in PHP, potential pitfalls include not properly sanitizing user input, not checking if the selected language is supported, and not handling cases where the session variable is not set. To solve this, make sure to validate and sanitize user input, check if the selected language is supported, and provide a fallback option if the session variable is not set. 

// Start the session
session_start();

// Array of supported languages
$supportedLanguages = ['en', 'fr', 'es'];

// Check if language selection is submitted
if(isset($_POST['language'])){
    $selectedLanguage = $_POST['language'];

    // Validate and sanitize user input
    if(in_array($selectedLanguage, $supportedLanguages)){
        $_SESSION['language'] = $selectedLanguage;
    } else {
        // Fallback to default language if selected language is not supported
        $_SESSION['language'] = 'en';
    }
}

// Check if session variable is set, otherwise set default language
if(!isset($_SESSION['language'])){
    $_SESSION['language'] = 'en';
}

Keywords

session variable language selection PHP localization error handling

Related Questions