From e6abff8a7fb4db048fbe3e7b265147c38ba38875 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Mon, 10 Oct 2016 17:19:10 +0200 Subject: [PATCH] Be consistent in filename sanitization MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michal Čihař --- libraries/core.lib.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/libraries/core.lib.php b/libraries/core.lib.php index 94812e6596..41aa4197a3 100644 --- a/libraries/core.lib.php +++ b/libraries/core.lib.php @@ -579,7 +579,7 @@ function PMA_downloadHeader($filename, $mimetype, $length = 0, $no_cache = true) PMA_noCacheHeader(); } /* Replace all possibly dangerous chars in filename */ - $filename = str_replace(array(';', '"', "\n", "\r"), '-', $filename); + $filename = Sanitize::sanitizeFilename($filename); if (!empty($filename)) { header('Content-Description: File Transfer'); header('Content-Disposition: attachment; filename="' . $filename . '"');