Re: cvs: php4 /ext/oci8 oci8.c
| From: | Derick Rethans | Date: | Thu, 21 Nov 2002 21:08:08 +0000 |
| Subject: | Re: cvs: php4 /ext/oci8 oci8.c | ||
| References: | 1 | Groups: | php.cvs |
| Request: | Send a blank email to php-cvs+get-16519@lists.php.net to get a copy of this message | ||
On Thu, 21 Nov 2002, Maxim Maletsky wrote:
> maxim Thu Nov 21 15:28:11 2002 EDT
>
> Modified files:
> /php4/ext/oci8 oci8.c
> Log:
> Disabled OCIPasswordChange() in safe mode. Possible security risks.
>
>
> + /* Disalllow in Safe Mode */
> + if (PG(safe_mode)) {
> + RETURN_FALSE;
> + }
You should add a warning there and not fail without a reason.
Derick
--
---------------------------------------------------------------------------
Derick Rethans http://derickrethans.nl/
JDI Media Solutions
--------------[ if you hold a unix shell to your ear, do you hear the c? ]-