From 5f55cb864e29f955b98de5f613d8b2ede1eeece4 Mon Sep 17 00:00:00 2001 From: Laurent Destailleur Date: Sat, 25 Oct 2008 20:54:41 +0000 Subject: [PATCH] Does not allow special char in file name --- htdocs/ecm/ecmdirectory.class.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/htdocs/ecm/ecmdirectory.class.php b/htdocs/ecm/ecmdirectory.class.php index 28cb4f9f7e8..204241a085a 100644 --- a/htdocs/ecm/ecmdirectory.class.php +++ b/htdocs/ecm/ecmdirectory.class.php @@ -421,7 +421,8 @@ class EcmDirectory // extends CommonObject if ($cursorindex >= 0) { - $ret=$this->cats[$cursorindex]['label'].'/'.$ret; + // Path is label sanitized (no space and no special char) and concatenated + $ret=sanitize_string($this->cats[$cursorindex]['label']).'/'.$ret; $idtosearch=$this->cats[$cursorindex]['id_mere']; $i++;