changed filename cleaning from PARAM_CLEANFILE to PARAM_FILE

diff --git a/question/export.php b/question/export.php
index 30a41a96337b8ed197728b79297d17d61400a6fd..3c96d42c340785f1d8283b427ef3820b49f1df2c 100644 (file)
--- a/question/export.php
+++ b/question/export.php
@@ -14,8 +14,8 @@
 
     $categoryid = optional_param('category',0, PARAM_INT);
     $courseid = required_param('courseid',PARAM_INT);
-    $format = optional_param('format','', PARAM_CLEANFILE );
-    $exportfilename = optional_param('exportfilename','',PARAM_CLEANFILE );
+    $format = optional_param('format','', PARAM_FILE );
+    $exportfilename = optional_param('exportfilename','',PARAM_FILE );
 
     if (! $course = get_record("course", "id", $courseid)) {
         error("Course does not exist!");

diff --git a/question/import.php b/question/import.php
index 2fe0044bd3a39f5ab383057c1df713bcbc2c35a5..6c975207322d06d1db4d24bb6e5be891e261b862 100644 (file)
--- a/question/import.php
+++ b/question/import.php
@@ -14,7 +14,7 @@
 
     $categoryid = optional_param('category', 0, PARAM_INT);
     $courseid = optional_param('course', 0, PARAM_INT);
-    $format = optional_param('format','',PARAM_CLEANFILE);
+    $format = optional_param('format','',PARAM_FILE);
 
     if (!$categoryid) { // try to get category from modform
         $showcatmenu = true; // will ensure that user can choose category