diff --git a/controller/lib/tools.php b/controller/lib/tools.php index e506579..c914461 100644 --- a/controller/lib/tools.php +++ b/controller/lib/tools.php @@ -15,7 +15,7 @@ class Tools { public static function sanitiseFileName($filename) { - return str_replace(['..', '/', '\\', DIRECTORY_SEPARATOR], '_', $filename); + return str_replace(['../', '..\\', "..$DIRECTORY_SEPARATOR"], '', $filename); } public static function checkURL($URL)