// file name compatible with POSIX
// protect against directory traversal
if ($Mode == 'UPDATE_ITEM')
{
$unique_name = preg_replace('/[^a-zA-Z0-9.\-_]/', '', $_POST['unique_name']);
// file name compatible with POSIX
// protect against directory traversal
if ($Mode == 'UPDATE_ITEM')
{
$unique_name = preg_replace('/[^a-zA-Z0-9.\-_]/', '', $_POST['unique_name']);