relative+cleaned paths

diff --git a/admin/xmldb/actions/template/template.class.php b/admin/xmldb/actions/template/template.class.php
index f54f38273922762e60d44776507527bf8863c6dc..c187dfa3d6f2716ed9cbd12f2c7f356b2363a88c 100644 (file)
--- a/admin/xmldb/actions/template/template.class.php
+++ b/admin/xmldb/actions/template/template.class.php
@@ -61,8 +61,8 @@ class template extends XMLDBAction {
 
     /// Do the job, setting result as needed
     /// Get the dir containing the file
-        $dirpath = required_param('dir', PARAM_CLEAN);
-        $dirpath = stripslashes_safe($dirpath);
+        $dirpath = required_param('dir', PARAM_PATH);
+        $dirpath = $CFG->dirroot . stripslashes_safe($dirpath);
 
     /// Get the correct dirs
         if (!empty($XMLDB->dbdirs)) {