cvs: php4 /ext/domxml php_domxml.c
| From: | Ilia Alshanetsky | Date: | Fri, 18 Apr 2003 00:20:23 +0000 |
| Subject: | cvs: php4 /ext/domxml php_domxml.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-20367@lists.php.net to get a copy of this message | ||
iliaa Thu Apr 17 20:20:23 2003 EDT
Modified files:
/php4/ext/domxml php_domxml.c
Log:
Added missing safe_mode checks.
Index: php4/ext/domxml/php_domxml.c
diff -u php4/ext/domxml/php_domxml.c:1.251 php4/ext/domxml/php_domxml.c:1.252
--- php4/ext/domxml/php_domxml.c:1.251 Thu Apr 10 08:45:38 2003
+++ php4/ext/domxml/php_domxml.c Thu Apr 17 20:20:22 2003
@@ -16,7 +16,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: php_domxml.c,v 1.251 2003/04/10 12:45:38 chregu Exp $ */
+/* $Id: php_domxml.c,v 1.252 2003/04/18 00:20:22 iliaa Exp $ */
/* TODO
* - Support Notation Nodes
@@ -3944,6 +3944,10 @@
DOMXML_PARAM_FOUR(docp, id, le_domxmldocp, "s|ll", &file, &file_len,
&compressmode, &format);
+ if ((PG(safe_mode) && (!php_checkuid(file, NULL, CHECKUID_CHECK_FILE_AND_DIR))) ||
php_check_open_basedir(file TSRMLS_CC)) {
+ RETURN_FALSE;
+ }
+
xmlSetCompressMode(compressmode);
if (format) {
@@ -5613,6 +5617,9 @@
}
if (zend_parse_parameters(ZEND_NUM_ARGS() TSRMLS_CC, "os|l", &idxml, &filename,
&filename_len, &compression) == FAILURE) {
+ RETURN_FALSE;
+ }
+ if ((PG(safe_mode) && (!php_checkuid(filename, NULL, CHECKUID_CHECK_FILE_AND_DIR))) ||
php_check_open_basedir(filename TSRMLS_CC)) {
RETURN_FALSE;
}