iliaa           Mon Oct 31 18:44:44 2005 EDT

  Modified files:              (Branch: PHP_5_1)
    /php-src/ext/curl   interface.c 
  Log:
  Additional open_basedir/safe_mode checks.
  
  
http://cvs.php.net/diff.php/php-src/ext/curl/interface.c?r1=1.62.2.5&r2=1.62.2.6&ty=u
Index: php-src/ext/curl/interface.c
diff -u php-src/ext/curl/interface.c:1.62.2.5 
php-src/ext/curl/interface.c:1.62.2.6
--- php-src/ext/curl/interface.c:1.62.2.5       Wed Oct 26 07:33:25 2005
+++ php-src/ext/curl/interface.c        Mon Oct 31 18:44:40 2005
@@ -16,7 +16,7 @@
    +----------------------------------------------------------------------+
 */
 
-/* $Id: interface.c,v 1.62.2.5 2005/10/26 11:33:25 sniper Exp $ */
+/* $Id: interface.c,v 1.62.2.6 2005/10/31 23:44:40 iliaa Exp $ */
 
 #define ZEND_INCLUDE_FULL_WINDOWS_HEADERS
 
@@ -119,7 +119,7 @@
                        RETURN_FALSE;                                           
                                                                                
                \
                }                                                               
                                                                                
                                \
                                                                                
                                                                                
                                \
-               if (tmp_url->query || php_check_open_basedir(tmp_url->path 
TSRMLS_CC) ||                                                                   
     \
+               if (tmp_url->query || tmp_url->fragment || 
php_check_open_basedir(tmp_url->path TSRMLS_CC) ||                              
                                     \
                        (PG(safe_mode) && !php_checkuid(tmp_url->path, "rb+", 
CHECKUID_CHECK_MODE_PARAM))       \
                ) {                                                             
                                                                                
                        \
                        php_url_free(tmp_url);                                  
                                                                                
        \

-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to