From de0983ee7d9cba451ab3d5487d27df1814724bf6 Mon Sep 17 00:00:00 2001
From: steinm <steinm@577cc39b-cfd1-4aa2-8bc3-eda205cea05a>
Date: Wed, 7 Dec 2011 07:33:11 +0000
Subject: [PATCH] - fixed GET method (due to new storage of document and folder
 names)

---
 webdav/letodms_webdav.php | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/webdav/letodms_webdav.php b/webdav/letodms_webdav.php
index fe0503e52..15f20d1d2 100644
--- a/webdav/letodms_webdav.php
+++ b/webdav/letodms_webdav.php
@@ -1,7 +1,10 @@
 <?php
 
 require_once "HTTP/WebDAV/Server.php";
-require_once "LetoDMS/Core.php";
+if(!empty($settings->_coreDir))
+	require_once($settings->_coreDir.'/Core.php');
+else
+	require_once('LetoDMS/Core.php');
 
 /**
  * LetoDMS access using WebDAV
@@ -428,7 +431,7 @@ class HTTP_WebDAV_Server_LetoDMS extends HTTP_WebDAV_Server
 			printf($format, 
 				   number_format($filesize),
 				   strftime("%Y-%m-%d %H:%M:%S", $mtime), 
-				   "<a href='".$_SERVER['SCRIPT_NAME'].$fullpath."'>$name</a>");
+				   "<a href=\"".$_SERVER['SCRIPT_NAME'].htmlspecialchars($fullpath)."\">".htmlspecialchars($name, ENT_QUOTES)."</a>");
 		}
 
 		echo "</pre>";