Sanitize filenames before using in Content-Disposition header

This commit is contained in:
Marc Delisle
2011-08-08 17:28:54 -04:00
parent c547703b10
commit 4e5c583dcf

View File

@@ -68,7 +68,7 @@ if (isset($ct) && !empty($ct)) {
header($content_type); header($content_type);
if (isset($cn) && !empty($cn)) { if (isset($cn) && !empty($cn)) {
header('Content-Disposition: attachment; filename=' . $cn); header('Content-Disposition: attachment; filename=' . PMA_sanitize_filename($cn));
} }
if (!isset($resize)) { if (!isset($resize)) {