[PHP-CVS] cvs: php4(PHP_4_3) /ext/pspell pspell.c

[Ilia Alshanetsky]

iliaa           Wed Jun 11 21:47:29 2003 EDT

  Modified files:              (Branch: PHP_4_3)
    /php4/ext/pspell    pspell.c 
  Log:
  MFH: Added missing safe_mode/open_basedir checks.
  
  
Index: php4/ext/pspell/pspell.c
diff -u php4/ext/pspell/pspell.c:1.28.8.2 php4/ext/pspell/pspell.c:1.28.8.3
--- php4/ext/pspell/pspell.c:1.28.8.2   Wed May 21 19:08:27 2003
+++ php4/ext/pspell/pspell.c    Wed Jun 11 21:47:28 2003
@@ -16,7 +16,7 @@
    +----------------------------------------------------------------------+
 */
 
-/* $Id: pspell.c,v 1.28.8.2 2003/05/21 23:08:27 jay Exp $ */
+/* $Id: pspell.c,v 1.28.8.3 2003/06/12 01:47:28 iliaa Exp $ */
 
 #define IS_EXT_MODULE
 
@@ -206,6 +206,15 @@
        config = new_pspell_config();
 
        convert_to_string_ex(personal);
+
+       if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(personal), NULL, 
CHECKUID_CHECK_FILE_AND_DIR))) {
+               RETURN_FALSE;
+       }
+
+       if (php_check_open_basedir(Z_STRVAL_PP(personal) TSRMLS_CC)) {
+               RETURN_FALSE;
+       }
+
        pspell_config_replace(config, "personal", Z_STRVAL_PP(personal));
        pspell_config_replace(config, "save-repl", "false");
 
@@ -737,6 +746,15 @@
        }
 
        convert_to_string_ex(personal);
+
+       if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(personal), NULL, 
CHECKUID_CHECK_FILE_AND_DIR))) {
+               RETURN_FALSE;
+       }
+
+       if (php_check_open_basedir(Z_STRVAL_PP(personal) TSRMLS_CC)) {
+               RETURN_FALSE;
+       }
+
        pspell_config_replace(config, "personal", Z_STRVAL_PP(personal));
 
        RETURN_TRUE;
@@ -768,6 +786,15 @@
        pspell_config_replace(config, "save-repl", "true");
 
        convert_to_string_ex(repl);
+
+       if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(repl), NULL, 
CHECKUID_CHECK_FILE_AND_DIR))) {
+               RETURN_FALSE;
+       }
+
+       if (php_check_open_basedir(Z_STRVAL_PP(repl) TSRMLS_CC)) {
+               RETURN_FALSE;
+       }
+
        pspell_config_replace(config, "repl", Z_STRVAL_PP(repl));
 
        RETURN_TRUE;



-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php