diff --git a/htdocs/core/lib/files.lib.php b/htdocs/core/lib/files.lib.php index de1a77b16a9..e4f415ca130 100644 --- a/htdocs/core/lib/files.lib.php +++ b/htdocs/core/lib/files.lib.php @@ -496,7 +496,7 @@ function dol_unescapefile($filename) // Remove path information and dots around the filename, to prevent uploading // into different directories or replacing hidden system files. // Also remove control characters and spaces (\x00..\x20) around the filename: - return trim(basename(stripslashes($filename)), ".\x00..\x20"); + return trim(basename($filename), ".\x00..\x20"); } /** @@ -765,7 +765,7 @@ function dol_delete_preview($object) { global $langs,$conf; require_once(DOL_DOCUMENT_ROOT."/core/lib/files.lib.php"); - + $element = $object->element; $dir = $conf->$element->dir_output;