From 18478666caa1b2d418ca04d9e18cc7c31e834d6a Mon Sep 17 00:00:00 2001
From: skodak <skodak>
Date: Wed, 12 Jul 2006 05:57:28 +0000
Subject: [PATCH] fixed printing of filenames from zip archives - SC#273;
 merged from MOODLE_16_STABLE

---
 files/index.php   | 2 +-
 lib/moodlelib.php | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/files/index.php b/files/index.php
index 76e455472f..238dd729e3 100644
--- a/files/index.php
+++ b/files/index.php
@@ -539,7 +539,7 @@
                     echo "<tr class=\"file\"><th align=\"left\" class=\"header name\">$strname</th><th align=\"right\" class=\"header size\">$strsize</th><th align=\"right\" class=\"header date\">$strmodified</th></tr>";
                     foreach ($list as $item) {
                         echo "<tr>";
-                        print_cell("left", $item['filename'], 'name');
+                        print_cell("left", s($item['filename']), 'name');
                         if (! $item['folder']) {
                             print_cell("right", display_size($item['size']), 'size');
                         } else {
diff --git a/lib/moodlelib.php b/lib/moodlelib.php
index 0ca8b10344..bacf39e7cc 100644
--- a/lib/moodlelib.php
+++ b/lib/moodlelib.php
@@ -6673,7 +6673,7 @@ function unzip_show_status ($list,$removepath) {
         foreach ($list as $item) {
             echo "<tr>";
             $item['filename'] = str_replace(cleardoubleslashes($removepath).'/', "", $item['filename']);
-            print_cell("left", $item['filename']);
+            print_cell("left", s($item['filename']));
             if (! $item['folder']) {
                 print_cell("right", display_size($item['size']));
             } else {
@@ -6690,7 +6690,7 @@ function unzip_show_status ($list,$removepath) {
         print_simple_box_start("center");
         echo "<pre>";
         foreach ($list as $item) {
-            echo str_replace(cleardoubleslashes($removepath.'/'), '', $item).'<br />';
+            echo s(str_replace(cleardoubleslashes($removepath.'/'), '', $item)).'<br />';
         }
         echo "</pre>";
         print_simple_box_end();
-- 
2.39.5