--- loncom/publisher/lonupload.pm	2001/05/25 16:36:36	1.3
+++ loncom/publisher/lonupload.pm	2001/05/25 17:03:58	1.4
@@ -67,7 +67,8 @@ sub phaseone {
 }
 
 sub phasetwo {
-    my ($r,$fn,$uname,$udom)=@_;
+   my ($r,$fn,$uname,$udom)=@_;
+   if ($fn=~/^\/priv\/$uname\//) { 
     my $tfn=$fn;
     $tfn=~s/^\/(\~|priv)\/(\w+)//;
     my $target='/home/'.$uname.'/public_html'.$tfn;
@@ -97,6 +98,11 @@ sub phasetwo {
    '<font size=+1 color=red>Please pick a filename</font><p>');
        &phaseone($r,$fn,$uname,$udom);
     }
+  } else {
+    $r->print(
+   '<font size=+1 color=red>Please pick a filename</font><p>');
+    &phaseone($r,$fn,$uname,$udom);
+  }
 }
 
 sub handler {