    function _translate() {
        global $LANG;

        $args = func_get_args();
        $l = $args[0];

        if (!$l) return 'NO LANGUAGE DEFINED';
        $key = $args[1];

        if (!isset($LANG[$l])) {
            require_once($_SERVER['DOCUMENT_ROOT'].'/inc/i18n/'.$l.'.php');
        }

        if (!isset($LANG[$l][$key])) {
            $text=$key;
        } else {
            $text=$LANG[$l][$key];
        }

        array_shift($args);
        if (count($args)>1) {
            $args[0] = $text;
            return call_user_func_array("sprintf",$args);
        } else {
            return $text;
        }
    }
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.