Fixed dangerous XSS vulnerability

1 files changed, 1 insertions, 1 deletions

diff --git a/post.php b/post.php
index 4dd8cc6e..18c97435 100644
--- a/post.php
+++ b/post.php
@@ -211,7 +211,7 @@
 		
 		$post['mod'] = isset($_POST['mod']) && $_POST['mod'];
 		if($post['has_file'])
-			$post['filename'] = get_magic_quotes_gpc() ? stripslashes($_FILES['file']['name']) : $_FILES['file']['name'];
+			$post['filename'] = utf8tohtml(get_magic_quotes_gpc() ? stripslashes($_FILES['file']['name']) : $_FILES['file']['name']);
 		
 		if($config['force_body'] && empty($post['body']))
 			error($config['error']['tooshort_body']);