check.php - fix access issue and use proper data directory
setup.php - use sanitized lang variable.