diff --git a/question/export.php b/question/export.php
index 30a41a96337..3c96d42c340 100644
--- a/question/export.php
+++ b/question/export.php
@@ -14,8 +14,8 @@
 
     $categoryid = optional_param('category',0, PARAM_INT);
     $courseid = required_param('courseid',PARAM_INT);
-    $format = optional_param('format','', PARAM_CLEANFILE );
-    $exportfilename = optional_param('exportfilename','',PARAM_CLEANFILE );
+    $format = optional_param('format','', PARAM_FILE );
+    $exportfilename = optional_param('exportfilename','',PARAM_FILE );
 
     if (! $course = get_record("course", "id", $courseid)) {
         error("Course does not exist!");
diff --git a/question/import.php b/question/import.php
index 2fe0044bd3a..6c975207322 100644
--- a/question/import.php
+++ b/question/import.php
@@ -14,7 +14,7 @@
 
     $categoryid = optional_param('category', 0, PARAM_INT);
     $courseid = optional_param('course', 0, PARAM_INT);
-    $format = optional_param('format','',PARAM_CLEANFILE);
+    $format = optional_param('format','',PARAM_FILE);
 
     if (!$categoryid) { // try to get category from modform
         $showcatmenu = true; // will ensure that user can choose category