Merged fix SC22 from STABLE, even though this file will be rewritten

with Petr's new file handling soon!  :-)

diff --git a/mod/quiz/quizfile.php b/mod/quiz/quizfile.php
index 1c8f5f1ec795d3b59d31d6bf017c171acfe18071..22fca1f75d08873225bc1136d73232e2fa748a83 100644 (file)
--- a/mod/quiz/quizfile.php
+++ b/mod/quiz/quizfile.php
@@ -41,6 +41,9 @@
     if (! ($filename = $regs[5])) {
         error("No valid file name supplied");
     }
+    if (detect_munged_arguments($relativefilepath)) {
+        error("Errors in the supplied file path");
+    }
 
     //////////////////////////////////////////
     // Info from $pathinfo is now extracted!