From dae74aa896113951dfce42fca75f7652b16b767e Mon Sep 17 00:00:00 2001
From: appu <apparao@vtiger.com>
Date: Thu, 2 Nov 2023 12:34:56 +0530
Subject: [PATCH] #1792:Special characters in inputs not supported across the
CRM
---
modules/Vtiger/helpers/ShowFile.php | 1 +
1 file changed, 1 insertion(+)
diff --git a/modules/Vtiger/helpers/ShowFile.php b/modules/Vtiger/helpers/ShowFile.php
index dd3d1ee07..a65361d89 100644
--- a/modules/Vtiger/helpers/ShowFile.php
+++ b/modules/Vtiger/helpers/ShowFile.php
@@ -67,6 +67,7 @@ class Vtiger_ShowFile_Helper {
$handle = fopen($finalFilePath, "rb");
$contents = fread($handle, filesize($finalFilePath));
fclose($handle);
+
//added since other than image files we need file names, other wise it downloads with public.php extension which is treated as dangerous
if($sanitizedFileName) {
header("Content-Disposition: attachment; filename=\"$sanitizedFileName\"");
--
GitLab