cvs: php4 /ext/pgsql pgsql.c
| From: | Yasuo Ohgaki | Date: | Wed, 17 Jul 2002 05:01:59 +0000 |
| Subject: | cvs: php4 /ext/pgsql pgsql.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-12862@lists.php.net to get a copy of this message | ||
yohgaki Wed Jul 17 01:01:59 2002 EDT
Modified files:
/php4/ext/pgsql pgsql.c
Log:
Added safe_mode & open_basedir checks for pg_lo_export()
@Added safe_mode & open_basedir checks for pg_lo_export() (Yasuo)
Index: php4/ext/pgsql/pgsql.c
diff -u php4/ext/pgsql/pgsql.c:1.204 php4/ext/pgsql/pgsql.c:1.205
--- php4/ext/pgsql/pgsql.c:1.204 Wed Jul 17 00:58:58 2002
+++ php4/ext/pgsql/pgsql.c Wed Jul 17 01:01:58 2002
@@ -19,7 +19,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: pgsql.c,v 1.204 2002/07/17 04:58:58 yohgaki Exp $ */
+/* $Id: pgsql.c,v 1.205 2002/07/17 05:01:58 yohgaki Exp $ */
#include <stdlib.h>
@@ -2091,6 +2091,14 @@
RETURN_FALSE;
}
+ if (PG(safe_mode) &&(!php_checkuid(file_in, NULL, CHECKUID_CHECK_FILE_AND_DIR))) {
+ RETURN_FALSE;
+ }
+
+ if (php_check_open_basedir(file_in TSRMLS_CC)) {
+ RETURN_FALSE;
+ }
+
ZEND_FETCH_RESOURCE2(pgsql, PGconn *, &pgsql_link, id, "PostgreSQL link", le_link,
le_plink);
if (lo_export(pgsql, oid, file_out)) {