cvs: php4 /main rfc1867.c
| From: | Zeev Suraski | Date: | Mon, 04 Sep 2000 22:05:00 +0000 |
| Subject: | cvs: php4 /main rfc1867.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-1560@lists.php.net to get a copy of this message | ||
zeev Mon Sep 4 15:05:00 2000 EDT
Modified files:
/php4/main rfc1867.c
Log:
Prevent exploit in [tmp_name] as well
Index: php4/main/rfc1867.c
diff -u php4/main/rfc1867.c:1.43 php4/main/rfc1867.c:1.44
--- php4/main/rfc1867.c:1.43 Mon Sep 4 14:23:41 2000
+++ php4/main/rfc1867.c Mon Sep 4 15:05:00 2000
@@ -15,7 +15,7 @@
| Authors: Rasmus Lerdorf <rasmus@php.net> |
+----------------------------------------------------------------------+
*/
-/* $Id: rfc1867.c,v 1.43 2000/09/04 21:23:41 zeev Exp $ */
+/* $Id: rfc1867.c,v 1.44 2000/09/04 22:05:00 zeev Exp $ */
#include <stdio.h>
#include "php.h"
@@ -358,6 +358,7 @@
sprintf(lbuf, "%s[tmp_name]", namebuf);
}
register_http_post_files_variable(lbuf, fn, http_post_files ELS_CC PLS_CC);
+ add_protected_variable(lbuf PLS_CC);
{
zval file_size;