diff --git a/classes/class.field.php b/classes/class.field.php index 9052ead..8692aea 100755 --- a/classes/class.field.php +++ b/classes/class.field.php @@ -277,7 +277,7 @@ function saveFile($user_id, $name, $value) } //figure out new filename - $filename = $file['name']; + $filename = sanitize_file_name($file['name']); $count = 0; while(file_exists($pmprorh_dir . $filename))