fix merged from stable

diff --git a/mod/resource/type/directory/resource.class.php b/mod/resource/type/directory/resource.class.php
index 607ccce55a38b0ec57ba5edeb6753072f61d2ebd..b5d6752f54b100b95d78f527f77280421a96e9fb 100644 (file)
--- a/mod/resource/type/directory/resource.class.php
+++ b/mod/resource/type/directory/resource.class.php
@@ -24,7 +24,11 @@ function display() {
 
     add_to_log($course->id, "resource", "view", "view.php?id={$cm->id}", $resource->id, $cm->id);
 
+
     if ($resource->reference) {
+        if (detect_munged_arguments($resource->reference, 0)) {
+            error("The filename contains illegal characters!");
+        }
         $relativepath = "{$course->id}/{$resource->reference}";
     } else {
         $relativepath = "{$course->id}";