iliaa Thu Aug 10 21:30:23 2006 UTC
Modified files: (Branch: PHP_5_1)
/php-src/ext/standard filestat.c
Log:
MFB: missing safe_mode check
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/filestat.c?r1=1.136.2.8&r2=1.136.2.9&diff_format=u
Index: php-src/ext/standard/filestat.c
diff -u php-src/ext/standard/filestat.c:1.136.2.8
php-src/ext/standard/filestat.c:1.136.2.9
--- php-src/ext/standard/filestat.c:1.136.2.8 Tue Apr 25 08:41:02 2006
+++ php-src/ext/standard/filestat.c Thu Aug 10 21:30:23 2006
@@ -16,7 +16,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: filestat.c,v 1.136.2.8 2006/04/25 08:41:02 tony2001 Exp $ */
+/* $Id: filestat.c,v 1.136.2.9 2006/08/10 21:30:23 iliaa Exp $ */
#include "php.h"
#include "safe_mode.h"
@@ -634,7 +634,7 @@
}
if ((wrapper = php_stream_locate_url_wrapper(filename, &local, 0
TSRMLS_CC)) == &php_plain_files_wrapper) {
- if (php_check_open_basedir(local TSRMLS_CC)) {
+ if (php_check_open_basedir(local TSRMLS_CC) || (PG(safe_mode)
&& !php_checkuid_ex(filename, NULL, CHECKUID_ALLOW_FILE_NOT_EXISTS,
CHECKUID_NO_ERRORS))) {
RETURN_FALSE;
}
}
--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
