diff --git a/main/inc/lib/fckeditor/editor/plugins/ImageManager/Classes/ImageManager.php b/main/inc/lib/fckeditor/editor/plugins/ImageManager/Classes/ImageManager.php index ffe4a4ca44..efc13db672 100644 --- a/main/inc/lib/fckeditor/editor/plugins/ImageManager/Classes/ImageManager.php +++ b/main/inc/lib/fckeditor/editor/plugins/ImageManager/Classes/ImageManager.php @@ -541,7 +541,8 @@ class ImageManager Files::delFile($file['tmp_name']); return false; } - + + $file['name'] = replace_dangerous_char($file['name'], 'strict'); $file_name = $file['name']; $extension = explode('.', $file_name); $count = count($extension); diff --git a/main/newscorm/lp_add_item.php b/main/newscorm/lp_add_item.php index 21857e39f1..e8db6a8642 100644 --- a/main/newscorm/lp_add_item.php +++ b/main/newscorm/lp_add_item.php @@ -66,12 +66,73 @@ $language_file = "learnpath"; */ $htmlHeadXtra[] = ' '; diff --git a/main/tracking/courseLog.php b/main/tracking/courseLog.php index 335e93039a..eb92badb78 100644 --- a/main/tracking/courseLog.php +++ b/main/tracking/courseLog.php @@ -34,7 +34,6 @@ if (isset($_GET['from']) && $_GET['from'] == 'myspace') { $this_section = SECTION_COURSES; } - $is_allowedToTrack = $is_courseAdmin || $is_platformAdmin || $is_courseCoach || $is_sessionAdmin; if (!$is_allowedToTrack) { @@ -44,11 +43,11 @@ if (!$is_allowedToTrack) { exit; } // including additional libraries -require_once '../newscorm/learnpath.class.php'; -require_once '../newscorm/learnpathItem.class.php'; -require_once '../newscorm/learnpathList.class.php'; -require_once '../newscorm/scorm.class.php'; -require_once '../newscorm/scormItem.class.php'; +require_once api_get_path(SYS_CODE_PATH).'newscorm/learnpath.class.php'; +require_once api_get_path(SYS_CODE_PATH).'newscorm/learnpathItem.class.php'; +require_once api_get_path(SYS_CODE_PATH).'newscorm/learnpathList.class.php'; +require_once api_get_path(SYS_CODE_PATH).'newscorm/scorm.class.php'; +require_once api_get_path(SYS_CODE_PATH).'newscorm/scormItem.class.php'; require_once api_get_path(LIBRARY_PATH).'tracking.lib.php'; require_once api_get_path(LIBRARY_PATH).'course.lib.php'; require_once api_get_path(LIBRARY_PATH).'usermanager.lib.php'; @@ -64,11 +63,11 @@ $csv_content = array(); // charset determination if (!empty($_GET['scormcontopen'])) { $tbl_lp = Database::get_course_table(TABLE_LP_MAIN); - $contopen = (int) $_GET['scormcontopen']; - $sql = "SELECT default_encoding FROM $tbl_lp WHERE id = ".$contopen; - $res = api_sql_query($sql,__FILE__,__LINE__); - $row = Database::fetch_array($res); - $lp_charset = $row['default_encoding']; + $contopen = (int) $_GET['scormcontopen']; + $sql = "SELECT default_encoding FROM $tbl_lp WHERE id = ".$contopen; + $res = api_sql_query($sql,__FILE__,__LINE__); + $row = Database::fetch_array($res); + $lp_charset = $row['default_encoding']; } $htmlHeadXtra[] = "