diff --git a/htdocs/ecm/ecmdirectory.class.php b/htdocs/ecm/ecmdirectory.class.php index 28cb4f9f7e8..204241a085a 100644 --- a/htdocs/ecm/ecmdirectory.class.php +++ b/htdocs/ecm/ecmdirectory.class.php @@ -421,7 +421,8 @@ class EcmDirectory // extends CommonObject if ($cursorindex >= 0) { - $ret=$this->cats[$cursorindex]['label'].'/'.$ret; + // Path is label sanitized (no space and no special char) and concatenated + $ret=sanitize_string($this->cats[$cursorindex]['label']).'/'.$ret; $idtosearch=$this->cats[$cursorindex]['id_mere']; $i++;