From 36e62734ec8bc220a0ceb2c2dafdd1a7cbbc5ad5 Mon Sep 17 00:00:00 2001
From: moodler <moodler>
Date: Fri, 1 Oct 2004 02:15:03 +0000
Subject: [PATCH] Clean pathname before showing an error

---
 mod/quiz/quizfile.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/mod/quiz/quizfile.php b/mod/quiz/quizfile.php
index 74583a91c05..a4ea748d86d 100644
--- a/mod/quiz/quizfile.php
+++ b/mod/quiz/quizfile.php
@@ -118,7 +118,8 @@
         header("Content-type: $mimetype");
         readfile("$pathname");
     } else {
-        error("Sorry, but the file you are looking for was not found ($pathname)", "course/view.php?id=$courseid");
+        error("Sorry, but the file you are looking for was not found (".clean_text($pathname).")", 
+              "course/view.php?id=$courseid");
     }
 
     exit;