barryserver-git

diff --git a/git.php b/git.php
index cd6a7a1..5dfee33 100644
--- a/git.php
+++ b/git.php
@@ -196,13 +196,20 @@ ob_start();
 		<h1><?php echo $TITLE; ?></h1>
 <?php
 	$path = $_SERVER["PATH_INFO"];
+	$path = str_replace("\"","\\\"",$path);
+	$path = str_replace("'","\'",$path);
+	$path = str_replace("$","\$",$path);
+	$path = str_replace(")","\)",$path);
+	$path = str_replace("(","\(",$path);
+	$path = str_replace("`","\`",$path);
+	$path = str_replace("|","\|",$path);
 	if (!isset($path) || $path === "") {header("Location: ".$ROOT.$SCRIPT."/");}
 
 	echo "		<span class=\"path\"><a href=\"".$ROOT.$SCRIPT."/\">".$TITLE."</a>";
 	$full = $ROOT.$SCRIPT;
 	foreach (explode("/", substr($path,1)) as $part) {
-		$full .= "/".$part;
-		echo "/<a href=\"".$full."\">".$part."</a>";
+		$full .= "/".htmlspecialchars($part);
+		echo "/<a href=\"".$full."\">".htmlspecialchars($part)."</a>";
 	}
 	echo "</span><br><br>\n";