preg_quote() the pattern we use for directory globs to avoid letting

the filename be treated as a regexp.  Fixes #1086.

1 files changed, 1 insertions, 0 deletions

diff --git a/modules/server_add/controllers/server_add.php b/modules/server_add/controllers/server_add.php
index 3e460f20..715274ab 100644
--- a/modules/server_add/controllers/server_add.php
+++ b/modules/server_add/controllers/server_add.php
@@ -156,6 +156,7 @@ class Server_Add_Controller extends Admin_Controller {
           $entry_id = null;
         }
 
+        $file = preg_quote($file);
         foreach (glob("$file/*") as $child) {
           if (is_dir($child)) {
             $queue[] = array($child, $entry_id);