1 files changed, 6 insertions, 0 deletions
diff --git a/include/ws_functions.inc.php b/include/ws_functions.inc.php
index ba7987c8e..f70810ccd 100644
--- a/include/ws_functions.inc.php
+++ b/include/ws_functions.inc.php
@@ -951,6 +951,8 @@ SELECT
     }
   }
 
+  secure_directory($upload_dir);
+
   // compute file path
   $date_string = preg_replace('/[^\d]/', '', $dbnow);
   $random_string = substr($params['file_sum'], 0, 8);
@@ -994,6 +996,8 @@ SELECT
     }
   }
 
+  secure_directory($thumbnail_dir);
+
   // thumbnail path, the filename may use a prefix and the extension is
   // always "jpg" (no matter what the real file format is)
   $thumbnail_path = sprintf(
@@ -1044,6 +1048,8 @@ SELECT
       }
     }
     
+    secure_directory($high_dir);
+    
     // high resolution path, same name as web size file
     $high_path = sprintf(
       '%s/%s.%s',