--- docman.php	2000/09/13 08:08:22	1.20
+++ docman.php	2000/09/13 08:27:43	1.21
@@ -976,8 +976,9 @@
 
 //////////////////////////////////////////////////////////////////
 
-function Logit($target,$msg) {
+function LogIt($target,$msg) {
 
+	$target=stripSlashes($target);
 	$dir=dirname($target);
 	if (! file_exists($dir."/.log")) {
 		mkdir($dir."/.log",0700);
@@ -996,6 +997,7 @@
 
 function WriteNote($target,$msg) {
 
+	$target=stripSlashes($target);
 	$dir=dirname($target);
 	if (! file_exists($dir."/.note")) {
 		mkdir($dir."/.note",0700);
@@ -1012,6 +1014,7 @@
 
 function ReadNote($target) {
 
+	$target=stripSlashes($target);
 	$dir=dirname($target);
 	$file=basename($target);
 	$msg="";
@@ -1028,6 +1031,7 @@
 
 function MoveTo($source,$folder) {
 
+	$source=stripSlashes($source);
 	$file=basename($source);
 	if (! file_exists($folder)) {
 		mkdir($folder,0700);
@@ -1041,6 +1045,7 @@
 
 function Lock($target) {
 
+	$target=stripSlashes($target);
 	$dir=dirname($target);
 	if (! file_exists($dir."/.lock")) {
 		mkdir($dir."/.lock",0700);
@@ -1061,6 +1066,7 @@
 
 function CheckLock($target) {
 
+	$target=stripSlashes($target);
 	$dir=dirname($target);
 	$file=basename($target);
 	$msg=0;
@@ -1075,6 +1081,7 @@
 
 function Unlock($target) {
 
+	$target=stripSlashes($target);
 	$dir=dirname($target);
 	$file=basename($target);
 	if (file_exists($dir."/.lock/$file")) {
@@ -1141,7 +1148,7 @@
 	$log=fopen("$gblFsRoot/.changelog","r");
 	$logarr = array();
 	while($line = fgetcsv($log,255,"\t")) {
-		if ($day!=1 || $day==1 && ($line[0]-time() < 24*60)) {
+		if ($day!=1 || ($day==1 && (time()-$line[0] < 24*60))) {
 			array_unshift($logarr,array($line[0],$line[1],$line[2],$line[3]));
 		}
 	}
@@ -1157,6 +1164,7 @@
 		print "<tr><td$cl>$date</td><td$cl>$time</td><td$cl><a href=\"$GLOBALS[PHP_SELF]?D=".urlencode($dir)."\">$dir</a>/$file</td><td$cl>$e[2]</td><td$cl>$e[3]</td></tr>\n";
 	}
 	print "</table>";
+	print "<p>".GifIcon(up)." Back to <a href=$GLOBALS[PHP_SELF]>front page</a>.</p>";
 }
 
 //////////////////////////////////////////////////////////////////
@@ -1399,7 +1407,9 @@
 	// $A=Ci : checkin file $D/$F
 	// $A=V : view file (do nothing except log)
 	// default : display directory $D
-	
+
+	$F=stripSlashes($F);
+
 	switch ($A) {
 	case "U" :
 		// upload to $relDir