diff --git a/files/js/files.js b/files/js/files.js
index df9f45a7af41198db704f96007a5e570863e2358..1c0a40c23684447e75f609b4ba0b0ea815730b37 100644
--- a/files/js/files.js
+++ b/files/js/files.js
@@ -417,7 +417,7 @@ var folderDropOptions={
 		var dir=$('#dir').val();
 		$.ajax({
 			url: 'ajax/move.php',
-		data: "dir="+dir+"&file="+file+'&target='+dir+'/'+target,
+		data: "dir="+encodeURIComponent(dir)+"&file="+encodeURIComponent(file)+'&target='+encodeURIComponent(dir)+'/'+encodeURIComponent(target),
 		complete: function(data){boolOperationFinished(data, function(){
 			var el = $('#fileList tr').filterAttr('data-file',file).find('td.filename');
 			el.draggable('destroy');
@@ -443,7 +443,7 @@ var crumbDropOptions={
 		}
 		$.ajax({
 			url: 'ajax/move.php',
-		 data: "dir="+dir+"&file="+file+'&target='+target,
+		 data: "dir="+encodeURIComponent(dir)+"&file="+encodeURIComponent(file)+'&target='+encodeURIComponent(target),
 		 complete: function(data){boolOperationFinished(data, function(){
 			 FileList.remove(file);
 		 });}