More fixes, thanks to Piter01

[mailer.git] / inc / modules / admin / action-email.php

diff --git a/inc/modules/admin/action-email.php b/inc/modules/admin/action-email.php
index 3c2d83513ec2e59efa5080bbb39a8f2b1490733e..806fc69daf85e1552c0f66265e9640152717c31e 100644 (file)
--- a/inc/modules/admin/action-email.php
+++ b/inc/modules/admin/action-email.php
@@ -38,10 +38,10 @@ if ((!defined('__SECURITY')) || (!IS_ADMIN())) {
 }
 
 // Add description as navigation point
-ADD_DESCR("admin", basename(__FILE__));
+ADD_DESCR("admin", __FILE__);
 
 // Load the include file
-$INC = sprintf("%sinc/modules/admin/what-%s.php", PATH, $GLOBALS['what']);
+$INC = sprintf("%sinc/modules/admin/what-%s.php", PATH, SQL_ESCAPE($GLOBALS['what']));
 if (FILE_READABLE($INC)) {
        // Ok, we finally load the admin action module
        include($INC);