iliaa Thu Jan 4 23:50:19 2007 UTC Modified files: /php-src/ext/session mod_files.c Log: MFB: Added missing open_basedir checks http://cvs.php.net/viewvc.cgi/php-src/ext/session/mod_files.c?r1=1.107&r2=1.108&diff_format=u Index: php-src/ext/session/mod_files.c diff -u php-src/ext/session/mod_files.c:1.107 php-src/ext/session/mod_files.c:1.108 --- php-src/ext/session/mod_files.c:1.107 Thu Jan 4 22:04:38 2007 +++ php-src/ext/session/mod_files.c Thu Jan 4 23:50:19 2007 @@ -16,7 +16,7 @@ +----------------------------------------------------------------------+ */ -/* $Id: mod_files.c,v 1.107 2007/01/04 22:04:38 pollita Exp $ */ +/* $Id: mod_files.c,v 1.108 2007/01/04 23:50:19 iliaa Exp $ */ #include "php.h" @@ -255,6 +255,10 @@ if (*save_path == '\0') { /* if save path is an empty string, determine the temporary dir */ save_path = php_get_temporary_directory(); + + if (php_check_open_basedir(save_path TSRMLS_CC)) { + return FAILURE; + } } /* split up input parameter */
-- PHP CVS Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php