[PHP-CVS] cvs: php4 /ext/pspell pspell.c

[Ilia Alshanetsky]

iliaa           Wed Jun 11 21:47:12 2003 EDT

  Modified files:              
    /php4/ext/pspell    pspell.c 
  Log:
  Added missing safe_mode/open_basedir checks.
  
  
Index: php4/ext/pspell/pspell.c
diff -u php4/ext/pspell/pspell.c:1.33 php4/ext/pspell/pspell.c:1.34
--- php4/ext/pspell/pspell.c:1.33       Tue Jun 10 16:03:35 2003
+++ php4/ext/pspell/pspell.c    Wed Jun 11 21:47:12 2003
@@ -16,7 +16,7 @@
    +----------------------------------------------------------------------+
 */
 
-/* $Id: pspell.c,v 1.33 2003/06/10 20:03:35 imajes Exp $ */
+/* $Id: pspell.c,v 1.34 2003/06/12 01:47:12 iliaa Exp $ */
 
 #define IS_EXT_MODULE
 
@@ -206,6 +206,15 @@
        config = new_pspell_config();
 
        convert_to_string_ex(personal);
+
+       if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(personal), NULL, 
CHECKUID_CHECK_FILE_AND_DIR))) {
+               RETURN_FALSE;
+       }
+
+       if (php_check_open_basedir(Z_STRVAL_PP(personal) TSRMLS_CC)) {
+               RETURN_FALSE;
+       }
+
        pspell_config_replace(config, "personal", Z_STRVAL_PP(personal));
        pspell_config_replace(config, "save-repl", "false");
 
@@ -737,6 +746,15 @@
        }
 
        convert_to_string_ex(personal);
+
+       if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(personal), NULL, 
CHECKUID_CHECK_FILE_AND_DIR))) {
+               RETURN_FALSE;
+       }
+
+       if (php_check_open_basedir(Z_STRVAL_PP(personal) TSRMLS_CC)) {
+               RETURN_FALSE;
+       }
+
        pspell_config_replace(config, "personal", Z_STRVAL_PP(personal));
 
        RETURN_TRUE;
@@ -768,6 +786,15 @@
        pspell_config_replace(config, "save-repl", "true");
 
        convert_to_string_ex(repl);
+
+       if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(repl), NULL, 
CHECKUID_CHECK_FILE_AND_DIR))) {
+               RETURN_FALSE;
+       }
+
+       if (php_check_open_basedir(Z_STRVAL_PP(repl) TSRMLS_CC)) {
+               RETURN_FALSE;
+       }
+
        pspell_config_replace(config, "repl", Z_STRVAL_PP(repl));
 
        RETURN_TRUE;



-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php