Re: cvs: php4 /ext/oci8 oci8.c
| From: | Maxim Maletsky | Date: | Thu, 21 Nov 2002 21:24:59 +0000 |
| Subject: | Re: cvs: php4 /ext/oci8 oci8.c | ||
| References: | 1 2 | Groups: | php.cvs |
| Request: | Send a blank email to php-cvs+get-16521@lists.php.net to get a copy of this message | ||
btw, Derick,
I see nothing added into NEWS. Does this work instantly or is the file
being built periodically? I remember someone mentioned (Andrei?) that
the script was broken. Not sure if it was fixed yet - that's why I was
asking.
--
Maxim Maletsky
maxim@php.net
Derick Rethans <derick@php.net> wrote... :
> On Thu, 21 Nov 2002, Maxim Maletsky wrote:
>
> > maxim Thu Nov 21 15:28:11 2002 EDT
> >
> > Modified files:
> > /php4/ext/oci8 oci8.c
> > Log:
> > Disabled OCIPasswordChange() in safe mode. Possible security risks.
> >
> >
> > + /* Disalllow in Safe Mode */
> > + if (PG(safe_mode)) {
> > + RETURN_FALSE;
> > + }
>
> You should add a warning there and not fail without a reason.
>
> Derick
>
> --
>
> ---------------------------------------------------------------------------
> Derick Rethans
> http://derickrethans.nl/
> JDI Media Solutions
> --------------[ if you hold a unix shell to your ear, do you hear the c? ]-
>
>
> --
> PHP CVS Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>