Add Inventory item, Image upload failed...

[TimSchofield]

I thought we already did, but if not, we probably should, as that character would be invalid in a file name. (clashes with path use)

I tried using touch, mv, and cp with a / in the filename, and the fail message had either "directory not found" or "file or directory not found".

The function says:

if (mb_strstr($CheckVariable, "'") or mb_strstr($CheckVariable, '+') or mb_strstr($CheckVariable, '?') or mb_strstr($CheckVariable, '.') or mb_strstr($CheckVariable, "\"") or mb_strstr($CheckVariable, '&') or mb_strstr($CheckVariable, "\\") or mb_strstr($CheckVariable, '"') or mb_strstr($CheckVariable, '>') or mb_strstr($CheckVariable, '<'))

So no, it checks for '\' but not '/'

Tim