diff --git a/wp-admin/includes/file.php b/wp-admin/includes/file.php index d5b46ce7d5..349feb2e6a 100644 --- a/wp-admin/includes/file.php +++ b/wp-admin/includes/file.php @@ -285,7 +285,11 @@ function wp_handle_sideload( &$file, $overrides = false ) { return $upload_error_handler( $file, $uploads['error'] ); $filename = wp_unique_filename( $uploads['path'], $file['name'], $unique_filename_callback ); - + + // Strip the query strings. + $filename = str_replace('?','-', $filename); + $filename = str_replace('&','-', $filename); + // Move the file to the uploads dir $new_file = $uploads['path'] . "/$filename"; if ( false === @ rename( $file['tmp_name'], $new_file ) ) {