cvs: php4 /ext/pspell pspell.c

iliaa Wed Jun 11 21:47:12 2003 EDT Modified files: /php4/ext/pspell pspell.c Log: Added missing safe_mode/open_basedir checks. Index: php4/ext/pspell/pspell.c diff -u php4/ext/pspell/pspell.c:1.33 php4/ext/pspell/pspell.c:1.34 --- php4/ext/pspell/pspell.c:1.33 Tue Jun 10 16:03:35 2003 +++ php4/ext/pspell/pspell.c Wed Jun 11 21:47:12 2003 @@ -16,7 +16,7 @@ +----------------------------------------------------------------------+ */ -/* $Id: pspell.c,v 1.33 2003/06/10 20:03:35 imajes Exp $ */ +/* $Id: pspell.c,v 1.34 2003/06/12 01:47:12 iliaa Exp $ */ #define IS_EXT_MODULE @@ -206,6 +206,15 @@ config = new_pspell_config(); convert_to_string_ex(personal); + + if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(personal), NULL, CHECKUID_CHECK_FILE_AND_DIR))) { + RETURN_FALSE; + } + + if (php_check_open_basedir(Z_STRVAL_PP(personal) TSRMLS_CC)) { + RETURN_FALSE; + } + pspell_config_replace(config, "personal", Z_STRVAL_PP(personal)); pspell_config_replace(config, "save-repl", "false"); @@ -737,6 +746,15 @@ } convert_to_string_ex(personal); + + if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(personal), NULL, CHECKUID_CHECK_FILE_AND_DIR))) { + RETURN_FALSE; + } + + if (php_check_open_basedir(Z_STRVAL_PP(personal) TSRMLS_CC)) { + RETURN_FALSE; + } + pspell_config_replace(config, "personal", Z_STRVAL_PP(personal)); RETURN_TRUE; @@ -768,6 +786,15 @@ pspell_config_replace(config, "save-repl", "true"); convert_to_string_ex(repl); + + if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(repl), NULL, CHECKUID_CHECK_FILE_AND_DIR))) { + RETURN_FALSE; + } + + if (php_check_open_basedir(Z_STRVAL_PP(repl) TSRMLS_CC)) { + RETURN_FALSE; + } + pspell_config_replace(config, "repl", Z_STRVAL_PP(repl)); RETURN_TRUE;