iliaa           Mon Oct 31 18:45:50 2005 EDT

  Modified files:              
    /php-src/ext/curl   interface.c 
  Log:
  MFB51: Additional open_basedir/safe_mode checks.
  
  
http://cvs.php.net/diff.php/php-src/ext/curl/interface.c?r1=1.68&r2=1.69&ty=u
Index: php-src/ext/curl/interface.c
diff -u php-src/ext/curl/interface.c:1.68 php-src/ext/curl/interface.c:1.69
--- php-src/ext/curl/interface.c:1.68   Wed Oct 26 07:33:05 2005
+++ php-src/ext/curl/interface.c        Mon Oct 31 18:45:50 2005
@@ -16,7 +16,7 @@
    +----------------------------------------------------------------------+
 */
 
-/* $Id: interface.c,v 1.68 2005/10/26 11:33:05 sniper Exp $ */
+/* $Id: interface.c,v 1.69 2005/10/31 23:45:50 iliaa Exp $ */
 
 #define ZEND_INCLUDE_FULL_WINDOWS_HEADERS
 
@@ -119,7 +119,7 @@
                        RETURN_FALSE;                                           
                                                                                
                \
                }                                                               
                                                                                
                                \
                                                                                
                                                                                
                                \
-               if (tmp_url->query || php_check_open_basedir(tmp_url->path 
TSRMLS_CC) ||                                                                   
     \
+               if (tmp_url->query || tmp_url->fragment || 
php_check_open_basedir(tmp_url->path TSRMLS_CC) ||                              
                                     \
                        (PG(safe_mode) && !php_checkuid(tmp_url->path, "rb+", 
CHECKUID_CHECK_MODE_PARAM))       \
                ) {                                                             
                                                                                
                        \
                        php_url_free(tmp_url);                                  
                                                                                
        \

-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to