diff --git a/modules/media/ajax/FileDownload.php b/modules/media/ajax/FileDownload.php index 5db0dc39b2a..2e40245b7d1 100644 --- a/modules/media/ajax/FileDownload.php +++ b/modules/media/ajax/FileDownload.php @@ -24,7 +24,7 @@ // Make sure that the user isn't trying to break out of the $path // by using a relative filename. -$file = basename($_GET['File']); +$file = html_entity_decode(basename($_GET['File'])); $config =& NDB_Config::singleton(); $path = $config->getSetting('mediaPath'); $filePath = $path . $file;