Sanitize filenames before using in Content-Disposition header

This commit is contained in:
Marc Delisle
2011-08-08 17:28:54 -04:00
parent c547703b10
commit 4e5c583dcf

View File

@@ -68,7 +68,7 @@ if (isset($ct) && !empty($ct)) {
header($content_type);
if (isset($cn) && !empty($cn)) {
header('Content-Disposition: attachment; filename=' . $cn);
header('Content-Disposition: attachment; filename=' . PMA_sanitize_filename($cn));
}
if (!isset($resize)) {