diff --git a/main/inc/lib/fckeditor/editor/plugins/ImageManager/Classes/ImageManager.php b/main/inc/lib/fckeditor/editor/plugins/ImageManager/Classes/ImageManager.php
index ffe4a4ca44..efc13db672 100644
--- a/main/inc/lib/fckeditor/editor/plugins/ImageManager/Classes/ImageManager.php
+++ b/main/inc/lib/fckeditor/editor/plugins/ImageManager/Classes/ImageManager.php
@@ -541,7 +541,8 @@ class ImageManager
Files::delFile($file['tmp_name']);
return false;
}
-
+
+ $file['name'] = replace_dangerous_char($file['name'], 'strict');
$file_name = $file['name'];
$extension = explode('.', $file_name);
$count = count($extension);
diff --git a/main/newscorm/lp_add_item.php b/main/newscorm/lp_add_item.php
index 21857e39f1..e8db6a8642 100644
--- a/main/newscorm/lp_add_item.php
+++ b/main/newscorm/lp_add_item.php
@@ -66,12 +66,73 @@ $language_file = "learnpath";
*/
$htmlHeadXtra[] = '
';
diff --git a/main/tracking/courseLog.php b/main/tracking/courseLog.php
index 335e93039a..eb92badb78 100644
--- a/main/tracking/courseLog.php
+++ b/main/tracking/courseLog.php
@@ -34,7 +34,6 @@ if (isset($_GET['from']) && $_GET['from'] == 'myspace') {
$this_section = SECTION_COURSES;
}
-
$is_allowedToTrack = $is_courseAdmin || $is_platformAdmin || $is_courseCoach || $is_sessionAdmin;
if (!$is_allowedToTrack) {
@@ -44,11 +43,11 @@ if (!$is_allowedToTrack) {
exit;
}
// including additional libraries
-require_once '../newscorm/learnpath.class.php';
-require_once '../newscorm/learnpathItem.class.php';
-require_once '../newscorm/learnpathList.class.php';
-require_once '../newscorm/scorm.class.php';
-require_once '../newscorm/scormItem.class.php';
+require_once api_get_path(SYS_CODE_PATH).'newscorm/learnpath.class.php';
+require_once api_get_path(SYS_CODE_PATH).'newscorm/learnpathItem.class.php';
+require_once api_get_path(SYS_CODE_PATH).'newscorm/learnpathList.class.php';
+require_once api_get_path(SYS_CODE_PATH).'newscorm/scorm.class.php';
+require_once api_get_path(SYS_CODE_PATH).'newscorm/scormItem.class.php';
require_once api_get_path(LIBRARY_PATH).'tracking.lib.php';
require_once api_get_path(LIBRARY_PATH).'course.lib.php';
require_once api_get_path(LIBRARY_PATH).'usermanager.lib.php';
@@ -64,11 +63,11 @@ $csv_content = array();
// charset determination
if (!empty($_GET['scormcontopen'])) {
$tbl_lp = Database::get_course_table(TABLE_LP_MAIN);
- $contopen = (int) $_GET['scormcontopen'];
- $sql = "SELECT default_encoding FROM $tbl_lp WHERE id = ".$contopen;
- $res = api_sql_query($sql,__FILE__,__LINE__);
- $row = Database::fetch_array($res);
- $lp_charset = $row['default_encoding'];
+ $contopen = (int) $_GET['scormcontopen'];
+ $sql = "SELECT default_encoding FROM $tbl_lp WHERE id = ".$contopen;
+ $res = api_sql_query($sql,__FILE__,__LINE__);
+ $row = Database::fetch_array($res);
+ $lp_charset = $row['default_encoding'];
}
$htmlHeadXtra[] = "