diff --git a/op/op.AddMultiDocument.php b/op/op.AddMultiDocument.php index 0ddc53fe6..f22e4a951 100644 --- a/op/op.AddMultiDocument.php +++ b/op/op.AddMultiDocument.php @@ -168,7 +168,7 @@ if( move_uploaded_file( $source_file_path, $target_file_path ) ) { else $name = basename($userfilename); - $categories = sanitizeString($_POST["categoryids"]); + $categories = preg_replace('/[^0-9,]+/', '', $_POST["categoryids"]); $cats = array(); if($categories) { $catids = explode(',', $categories);