From cd8beea5d97fe1bf2015b2ea4e888b5c3eddb50e Mon Sep 17 00:00:00 2001
From: martinlanghoff <martinlanghoff>
Date: Mon, 13 Dec 2004 06:37:57 +0000
Subject: [PATCH] Fixed SC#30 - credits go to skodak

---
 mod/scorm/details.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/mod/scorm/details.php b/mod/scorm/details.php
index 90be629ff6c..900a8316259 100755
--- a/mod/scorm/details.php
+++ b/mod/scorm/details.php
@@ -31,7 +31,8 @@
     //
 
     $coursedir = "$CFG->dataroot/$course->id";
-
+    $form->reference = clean_param($form->reference, PARAM_PATH);
+    
     if ($scormdir = make_upload_directory("$course->id/$CFG->moddata/scorm")) {
             if ($tempdir = scorm_datadir($scormdir, $form->datadir)) {
                 copy ("$coursedir/$form->reference", $tempdir."/".basename($form->reference));