Sanitize filename and pass the right one to the handler

git-svn-id: http://svn.automattic.com/wordpress-mu/trunk@812 7be80a69-a1ef-0310-a953-fb0f7c49ff36

1 files changed, 2 insertions, 2 deletions

diff --git a/xmlrpc.php b/xmlrpc.php
index 6153e50..91fb661 100644
--- a/xmlrpc.php
+++ b/xmlrpc.php
@@ -827,7 +827,7 @@ class wp_xmlrpc_server extends IXR_Server {
 		$user_pass   = $wpdb->escape($args[2]);
 		$data        = $args[3];
 
-		$name = $data['name'];
+		$name = sanitize_file( $data['name'] );
 		$type = $data['type'];
 		$bits = $data['bits'];
 
@@ -851,7 +851,7 @@ class wp_xmlrpc_server extends IXR_Server {
 			logIO('O', '(MW) Could not write file '.$name);
 			return new IXR_Error(500, 'Could not write file '.$name);
 		}
-		return apply_filters( 'wp_handle_upload', array( 'file' => $name, 'url' => $upload[ 'url' ], 'type' => $type ) );
+		return apply_filters( 'wp_handle_upload', array( 'file' => $upload[ 'file' ], 'url' => $upload[ 'url' ], 'type' => $type ) );
 	}