Fix a bug where storage objects allow deleting of files in other storage objects.

lib/WebGUI/Storage.pm

@@ -465,6 +465,7 @@ it doesn't.
 sub deleteFile {
     my $self = shift;
     my $filename = shift;
+    return undef if $filename =~ m{\.\./};  ##prevent deleting files outside of this object
     unlink($self->getPath($filename));
 }
 
@@ -774,6 +775,20 @@ sub getPath {
 }
 
 
+#-------------------------------------------------------------------
+
+=head2 getPathFrag (  )
+
+Returns the internal, upload dir specific part of the path.
+
+=cut
+
+sub getPathFrag {
+    my $self = shift;	
+    return join '/', $self->{_part1}, $self->{_part2}, $self->getFileId;
+}
+
+
 #-------------------------------------------------------------------
 
 =head2 getUrl ( [ file ] )