zhhealthcare/openemr — comment on commit 432b99d5f3f0a2373c192354b7a6e05b7d39c7c4
File: interface/logview/erx_logview.php line 11
By bradymiller:

Need to watch out here from a security perspective. Good idea to only allow legal filename characters or a hacker could submit the filename with something ../../../ to grab other files.