Since the other bug was marked as a dup of this, I'll note again that you can fix accidental manifestations of this problem (e.g. a folder called New Folder) by quoting the %u in d3lphin_su, but that won't stand up to deliberate attacks.
Since the other bug was marked as a dup of this, I'll note again that you can fix accidental manifestations of this problem (e.g. a folder called New Folder) by quoting the %u in d3lphin_su, but that won't stand up to deliberate attacks.