Index: /FCKeditor/trunk/editor/filemanager/connectors/perl/commands.pl
===================================================================
--- /FCKeditor/trunk/editor/filemanager/connectors/perl/commands.pl	(revision 1648)
+++ /FCKeditor/trunk/editor/filemanager/connectors/perl/commands.pl	(revision 1649)
@@ -92,4 +92,5 @@
 	if($FORM{'NewFolderName'} ne "") {
 		$sNewFolderName = $FORM{'NewFolderName'};
+		$sNewFolderName =~ s/\.|\\|\/|\||\:|\?|\*|\"|<|>|[[:cntrl:]]/_/g;
 		# Map the virtual path to the local server path of the current folder.
 		$sServerDir = &ServerMapFolder($resourceType, $currentFolder);
@@ -129,4 +130,5 @@
 		# Get the uploaded file name.
 		$sFileName = $new_fname;
+		$sFileName =~ s/\\|\/|\||\:|\?|\*|\"|<|>|[[:cntrl:]]/_/g;
 		$sOriginalFileName = $sFileName;