From cd4632b46c62855f7e1c1c93d20ffd64edcb476e Mon Sep 17 00:00:00 2001
From: FusionPBX <markjcrane@gmail.com>
Date: Sat, 10 Aug 2019 09:25:15 -0600
Subject: [PATCH] Update filedelete.php

---
 app/edit/filedelete.php | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/app/edit/filedelete.php b/app/edit/filedelete.php
index 3813087221..5387062b0c 100644
--- a/app/edit/filedelete.php
+++ b/app/edit/filedelete.php
@@ -81,7 +81,7 @@
 		echo "				<td>".$text['label-path']."</td>";
 		echo "			</tr>";
 		echo "			<tr>";
-		echo "				<td>".$folder."</td>";
+		echo "				<td>".escape($folder)."</td>";
 		echo "			</tr>";
 		echo "		</table>";
 		echo "		<br />";
@@ -90,11 +90,11 @@
 		echo "				<td>".$text['label-file-name']."</td>";
 		echo "			</tr>";
 		echo "			<tr>";
-		echo "				<td><input type='text' name='file' value='".$file."'></td>";
+		echo "				<td><input type='text' name='file' value='".escape($file)."'></td>";
 		echo "			</tr>";
 		echo "			<tr>";
 		echo "				<td colspan='1' align='right'>";
-		echo "					<input type='hidden' name='folder' value='$folder'>";
+		echo "					<input type='hidden' name='folder' value='".escape($folder)."'>";
 		echo "					<input type='hidden' name='token' id='token' value='". $_SESSION['token']. "'>";
 		echo "					<input type='submit' value='".$text['button-del-file']."'>";
 		echo "				</td>";
@@ -106,5 +106,4 @@
 		//include the footer
 		require_once "footer.php";
 	}
-
 ?>