Do not utf8 decode variables that are to be stored in DB, just file n…

…ames and pathes. Should fix #493
pydio · Nov 21, 2014 · 1e5e88b · 1e5e88b · Nanomani · Nov 21, 2014
1 parent 82dd348
commit 1e5e88b
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/core/src/plugins/action.share/class.ShareCenter.php b/core/src/plugins/action.share/class.ShareCenter.php
@@ -1703,8 +1703,8 @@ public function createSharedRepository($httpVars, $repository, $accessDriver, $u
             $index ++;
         }
 
-        $label = AJXP_Utils::decodeSecureMagic($httpVars["repo_label"]);
-        $description = AJXP_Utils::decodeSecureMagic($httpVars["repo_description"]);
+        $label = AJXP_Utils::sanitize(AJXP_Utils::securePath($httpVars["repo_label"]), AJXP_SANITIZE_HTML);
+        $description = AJXP_Utils::sanitize(AJXP_Utils::securePath($httpVars["repo_description"]), AJXP_SANITIZE_HTML);
         if (isSet($httpVars["repository_id"])) {
             $editingRepo = ConfService::getRepositoryById($httpVars["repository_id"]);
         }