Merge from MOODLE_14_STABLE - Fixed SC#30 - credits go to skodak

diff --git a/mod/scorm/details.php b/mod/scorm/details.php
index f02dcee7078440a58d33fec050c00c3fe59cad91..626f5033667444dfeb7cba98e8ae51b04d1cb873 100755 (executable)
--- a/mod/scorm/details.php
+++ b/mod/scorm/details.php
@@ -31,7 +31,8 @@
     //
 
     $coursedir = "$CFG->dataroot/$course->id";
-
+    $form->reference = clean_param($form->reference, PARAM_PATH);
+    
     if ($scormdir = make_upload_directory("$course->id/$CFG->moddata/scorm")) {
         if ($tempdir = scorm_datadir($scormdir, $form->datadir)) {
             copy ("$coursedir/$form->reference", $tempdir."/".basename($form->reference));