Strip slashes from filenames

diff --git a/lib/moodlelib.php b/lib/moodlelib.php
index ae0372c7e55543e393ab465ec40e0854779d4d00..fdb6eb0a1ab9f557a795fc0e5ac89f2411f935da 100644 (file)
--- a/lib/moodlelib.php
+++ b/lib/moodlelib.php
@@ -1794,6 +1794,7 @@ function display_size($size) {
 }
 
 function clean_filename($string) {
+    $string = stripslashes($string);
     $string = eregi_replace("\.\.", "", $string);
     $string = eregi_replace("[^([:alnum:]|\.)]", "_", $string);
     return    eregi_replace("_+", "_", $string);