Index: branches/5.1.x/core/units/helpers/file_helper.php
===================================================================
diff -u -N -r14391 -r14477
--- branches/5.1.x/core/units/helpers/file_helper.php	(.../file_helper.php)	(revision 14391)
+++ branches/5.1.x/core/units/helpers/file_helper.php	(.../file_helper.php)	(revision 14477)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: file_helper.php 14391 2011-06-27 07:59:15Z alex $
+* @version	$Id: file_helper.php 14477 2011-08-13 05:22:11Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -258,7 +258,7 @@
 			$result = true;
 
 			if (!file_exists($path) || !is_dir($path)) {
-				$parent_path = preg_replace('#/[^/]+/?$#', '', $path);
+				$parent_path = preg_replace('#(/|\\\)[^/\\\]+(/|\\\)?$#', '', $path);
 				$result = $this->CheckFolder($parent_path);
 
 				if ($result) {
@@ -393,8 +393,11 @@
 		function urlToPath($url)
 		{
 			$base_url = rtrim($this->Application->BaseURL(), '/');
-			$path = preg_replace('/^' . preg_quote($base_url, '/') . '(.*)/', FULL_PATH . '\\1', $url);
 
+			// escape replacement patterns, like "\<number>"
+			$full_path = preg_replace('/(\\\[\d]+)/', '\\\\\1', FULL_PATH);
+			$path = preg_replace('/^' . preg_quote($base_url, '/') . '(.*)/', $full_path . '\\1', $url, 1);
+
 			return str_replace('/', DIRECTORY_SEPARATOR, rawurldecode($path));
 		}
 	}
\ No newline at end of file