X-Git-Url: https://git.p6c8.net/devedit.git/blobdiff_plain/01eb441007a9ab736d2a9b518975379f8c31dcae..ed91b27bf5622a0eeb0a1d7adaebaea0ab380a32:/modules/Command.pm

diff --git a/modules/Command.pm b/modules/Command.pm
index f42deeb..b2bbfe9 100644
--- a/modules/Command.pm
+++ b/modules/Command.pm
@@ -514,8 +514,8 @@ sub exec_upload($$)
  my $virtual        = $data->{'virtual'};
  my $cgi            = $data->{'cgi'};
 
- return error($config->{'errors'}->{'no_directory'},upper_path($virtual),{FILE => $virtual}) unless(-d $physical && not -l $physical);
- return error($config->{'errors'}->{'dir_no_create'},$virtual,{DIR => $virtual})             unless(-w $physical);
+ return error($config->{'errors'}->{'no_directory'},upper_path($virtual),{FILE => encode_html($virtual)}) unless(-d $physical && not -l $physical);
+ return error($config->{'errors'}->{'dir_no_create'},$virtual,{DIR => encode_html($virtual)})             unless(-w $physical);
 
  if(my $uploaded_file = $cgi->param('uploaded_file'))
  {