This is related to that one:
http://www.elkarte.net/community/index.php?topic=1169.0
For the moment we can use a workaround, in Subs.php:
if (strpos($_SERVER['REQUEST_URL'], 'action=dlattach') === false && strpos($_SERVER['REQUEST_URL'], 'action=viewadminfile') === false)
if (strpos($_SERVER['REQUEST_URL'], 'action=dlattach') === false && strpos($_SERVER['REQUEST_URL'], 'action=viewadminfile') === false && strpos($_SERVER['REQUEST_URL'], ';xml') === false)
In 1.1 it may be worth create a function to validate this kind of situations.
It may not work in all the situations (for example when coming from SSI or some custom coded page...).