From a97e45be565f6072e6b671c9b8d83e8b29513e73 Mon Sep 17 00:00:00 2001
From: moodler <moodler>
Date: Wed, 15 Dec 2004 13:02:48 +0000
Subject: [PATCH] Better check for bad resource name - Found by skodak SC#32

---
 mod/resource/type/directory/resource.class.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/mod/resource/type/directory/resource.class.php b/mod/resource/type/directory/resource.class.php
index 095aff3a722..59d670533c2 100644
--- a/mod/resource/type/directory/resource.class.php
+++ b/mod/resource/type/directory/resource.class.php
@@ -24,7 +24,11 @@ function display() {
 
     add_to_log($course->id, "resource", "view", "view.php?id={$cm->id}", $resource->id, $cm->id);
 
+
     if ($resource->reference) {
+        if (detect_munged_arguments($resource->reference, 0)) {
+            error("The filename contains illegal characters!");
+        }
         $relativepath = "{$course->id}/{$resource->reference}";
     } else {
         $relativepath = "{$course->id}";