--- docman.php	2000/09/13 08:27:43	1.21
+++ docman.php	2000/09/13 09:59:16	1.22
@@ -367,7 +367,7 @@
 </FORM>
 
 <?php
-	
+
 	$name=basename("$fsDir/$fn");
 	$logname=dirname("$fsDir/$fn")."/.log/$name";
 	$bakdir=dirname("$fsDir/$fn")."/.bak";
@@ -978,7 +978,6 @@
 
 function LogIt($target,$msg) {
 
-	$target=stripSlashes($target);
 	$dir=dirname($target);
 	if (! file_exists($dir."/.log")) {
 		mkdir($dir."/.log",0700);
@@ -1226,7 +1225,9 @@
 
 	$fsDir = $gblFsRoot . $relDir ; // current directory
 	if ( !is_dir($fsDir) ) Error("Dir not found",$relDir) ;
-	
+
+	$FN=stripSlashes($FN);
+
 	switch ($POSTACTION) {
 	case "UPLOAD" :
 		if (!is_writeable($fsDir)) Error("Write denied",$relDir) ;
@@ -1267,6 +1268,7 @@
 
 	case "SAVE" :
 		$path = $gblFsRoot . $RELPATH ;
+		$path=stripSlashes($path);
 		$writable = is_writeable($path) ;
 		$legaldir = is_writeable(dirname($path)) ;
 		$exists   = (file_exists($path)) ? 1 : 0 ; 
@@ -1274,6 +1276,7 @@
 	 	if (!($writable || (!$exists && $legaldir))) 
 			Error("Write denied",$RELPATH) ;
 		$fh = fopen($path, "w") ;
+		$FILEDATA=stripSlashes($FILEDATA);
 		fwrite($fh,$FILEDATA) ;
 		fclose($fh) ;
 		clearstatcache() ;
@@ -1408,8 +1411,6 @@
 	// $A=V : view file (do nothing except log)
 	// default : display directory $D
 
-	$F=stripSlashes($F);
-
 	switch ($A) {
 	case "U" :
 		// upload to $relDir
@@ -1422,10 +1423,12 @@
 		EndHTML() ;
 		exit ;
 	case "E" :
+		$F=stripSlashes($F);
 		// detail of $relDir/$F
 		if (is_file("$gblFsRoot/$relDir/$F")) DetailPage($gblFsRoot, $relDir, $F) ;
 		exit ;
 	case "C" :
+		$F=stripSlashes($F);
 		// listing of $relDir/$F 
 		DisplayCode($gblFsRoot, $relDir, $F) ;
 		exit ;
@@ -1436,6 +1439,7 @@
 		Header("Location: ".urlpath("$relDir/$F"));
 		exit;
 	case "Ci" :
+		$F=stripSlashes($F);
 		// upload && update to $relDir
 		if (!is_writeable($gblFsRoot . $relDir)) 
 			Error("Write access denied",$relDir) ;