--- loncom/publisher/lonupload.pm	2004/02/17 15:23:53	1.25
+++ loncom/publisher/lonupload.pm	2004/03/31 05:24:00	1.26
@@ -2,7 +2,7 @@
 # The LearningOnline Network with CAPA
 # Handler to upload files into construction space
 #
-# $Id: lonupload.pm,v 1.25 2004/02/17 15:23:53 raeburn Exp $
+# $Id: lonupload.pm,v 1.26 2004/03/31 05:24:00 albertel Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -165,7 +165,7 @@ sub phasetwo {
 #     target is the full filesystem path of the destination file.
 	my $base = &File::Basename::basename($fn);
 	my $path = &File::Basename::dirname($fn);
-	$base    = &HTML::Entities::encode($base);
+	$base    = &HTML::Entities::encode($base,'<>&"');
 	my $url  = $path."/".$base; 
 	&Debug($r, "URL is now ".$url);
 	my $datatoken=$ENV{'form.datatoken'};