#35843 [Opn->Fbk]: imagettftext don't check open_basedir and safe_mode

From: Date: Fri, 30 Dec 2005 09:42:28 +0000
Subject: #35843 [Opn->Fbk]: imagettftext don't check open_basedir and safe_mode
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-91256@lists.php.net to get a copy of this message 
 ID:               35843
 Updated by:       tony2001@php.net
 Reported By:      vmlinuz386 at yahoo dot com dot ar
-Status:           Open
+Status:           Feedback
 Bug Type:         Feature/Change Request
 Operating System: GNU/Linux
 PHP Version:      5.1.1, 4.4.1
 New Comment:

I don't see any harm in this particular case: you can't get the file
contents or change it.
And in this same time this makes possible to use system fonts.


Previous Comments:
------------------------------------------------------------------------

[2005-12-29 19:55:42] vmlinuz386 at yahoo dot com dot ar

Description:
------------
In file ext/gd/gdttf.c this call to freetype without any check
open_basedir and safe_mode:
        if ((err = TT_Open_Face(*b->engine, a->fontname, &a->face))) {

this is also in 5.1.1

If you need a font in your scripts the font will be in some directory
asigned for you.




------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=35843&edit=1

Thread (2 messages)

« previous php.bugs (#91256) next »