Added some cleaning to the category path for some safety.

sbourget · Jan 5, 2007 · dd0730c · dd0730c
1 parent 8a45fcd
commit dd0730c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/lib/questionlib.php b/lib/questionlib.php
@@ -1603,6 +1603,7 @@ function question_categorylist($categoryid) {
  * @return mixed category object or null if fails
  */
 function create_category_path( $catpath, $delimiter='/', $courseid=0 ) {
+	$catpath = clean_param( $catpath,PARAM_PATH ); 
     $catnames = explode( $delimiter, $catpath );
     $parent = 0;
     $category = null;