Index: branches/2.8.x/CHANGELOG
===================================================================
--- branches/2.8.x/CHANGELOG	(revision 1881)
+++ branches/2.8.x/CHANGELOG	(revision 1882)
@@ -11,7 +11,8 @@
 ! = Update/Change
 ===============================================================================
 
-
+06 Mar-2013 Build 1882 Werner v.d.Decken(DarkViper)
+# protect magic setter to fix security issue in WbAdapter
 05 Mar-2013 Build 1881 Dietmar Woellbrink (Luisehahne)
 # bugfix setting slash in class m_news_Reorg ( access files in root)
 ! upgrade-script shows count of created module access files
Index: branches/2.8.x/wb/admin/interface/version.php
===================================================================
--- branches/2.8.x/wb/admin/interface/version.php	(revision 1881)
+++ branches/2.8.x/wb/admin/interface/version.php	(revision 1882)
@@ -51,5 +51,5 @@
 
 // check if defined to avoid errors during installation (redirect to admin panel fails if PHP error/warnings are enabled)
 if(!defined('VERSION')) define('VERSION', '2.8.3');
-if(!defined('REVISION')) define('REVISION', '1881');
+if(!defined('REVISION')) define('REVISION', '1882');
 if(!defined('SP')) define('SP', '');
Index: branches/2.8.x/wb/framework/Translate.php
===================================================================
--- branches/2.8.x/wb/framework/Translate.php	(revision 1881)
+++ branches/2.8.x/wb/framework/Translate.php	(revision 1882)
@@ -136,6 +136,7 @@
  */	
 	public function addAddon($sAddon)
 	{
+		$sAddon = str_replace('/', '\\', $sAddon);
 		if(!(strtolower($sAddon) == 'core' || $sAddon == '' || isset($this->aLoadedAddons[$sAddon]))) {
 		// load requested addon translations if needed and possible
 			$oTmp = new TranslationTable($sAddon, 
@@ -152,6 +153,7 @@
  */	
 	public function enableAddon($sAddon)
 	{
+		$sAddon = str_replace('/', '\\', $sAddon);
 		if(!(strtolower($sAddon) == 'core' || $sAddon == '')) {
 			if(!isset($this->aLoadedAddons[$sAddon])) {
 				$this->addAddon($sAddon);
@@ -202,6 +204,15 @@
 		return $sRetval;
 	}
 /**
+ * Protect class from property injections
+ * @param string name of property
+ * @param mixed value
+ * @throws TranslationException
+ */	
+	public function __set($name, $value) {
+		throw new TranslationException('tried to set a readonly or nonexisting property ['.$name.']!! ');
+	}
+/**
  * Return complete table of translations
  * @return array
  * @deprecated for backward compatibility only. Will be removed shortly