From 72a635a25086a13ea7609b44586b1f8c757141ed Mon Sep 17 00:00:00 2001 From: Hubert Borderiou Date: Thu, 26 Jan 2012 13:32:11 +0100 Subject: [PATCH] restore line 209-213 for document.php file, see 57ae201c31fb --- main/document/document.php | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/main/document/document.php b/main/document/document.php index 83daf850c7..d92214e87d 100644 --- a/main/document/document.php +++ b/main/document/document.php @@ -206,7 +206,11 @@ switch ($action) { $file = $sys_course_path.$_course['path'].'/document'.$document_info['path']; $copyfile = $user_folder.basename($document_info['path']); - $file_link = Display::url(get_lang('SeeFile'), api_get_path(WEB_CODE_PATH).'social/myfiles.php'); + $cidReq = Security::remove_XSS($_GET['cidReq']); + $id_session= Security::remove_XSS($_GET['id_session']); + $gidReq= Security::remove_XSS($_GET['gidReq']); + $id= Security::remove_XSS($_GET['id']); + $file_link = Display::url(get_lang('SeeFile'), api_get_path(WEB_CODE_PATH).'social/myfiles.php?cidReq='.$cidReq.'&id_session='.$id_session.'&gidReq='.$gidReq.'&parent_id='.$parent_id); if (file_exists($copyfile)) { $message = get_lang('CopyAlreadyDone').'

';