cvs: php4(PHP_4_3) /ext/pspell pspell.c
| From: | Ilia Alshanetsky | Date: | Thu, 12 Jun 2003 01:47:29 +0000 |
| Subject: | cvs: php4(PHP_4_3) /ext/pspell pspell.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-21627@lists.php.net to get a copy of this message | ||
iliaa Wed Jun 11 21:47:29 2003 EDT
Modified files: (Branch: PHP_4_3)
/php4/ext/pspell pspell.c
Log:
MFH: Added missing safe_mode/open_basedir checks.
Index: php4/ext/pspell/pspell.c
diff -u php4/ext/pspell/pspell.c:1.28.8.2 php4/ext/pspell/pspell.c:1.28.8.3
--- php4/ext/pspell/pspell.c:1.28.8.2 Wed May 21 19:08:27 2003
+++ php4/ext/pspell/pspell.c Wed Jun 11 21:47:28 2003
@@ -16,7 +16,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: pspell.c,v 1.28.8.2 2003/05/21 23:08:27 jay Exp $ */
+/* $Id: pspell.c,v 1.28.8.3 2003/06/12 01:47:28 iliaa Exp $ */
#define IS_EXT_MODULE
@@ -206,6 +206,15 @@
config = new_pspell_config();
convert_to_string_ex(personal);
+
+ if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(personal), NULL,
CHECKUID_CHECK_FILE_AND_DIR))) {
+ RETURN_FALSE;
+ }
+
+ if (php_check_open_basedir(Z_STRVAL_PP(personal) TSRMLS_CC)) {
+ RETURN_FALSE;
+ }
+
pspell_config_replace(config, "personal", Z_STRVAL_PP(personal));
pspell_config_replace(config, "save-repl", "false");
@@ -737,6 +746,15 @@
}
convert_to_string_ex(personal);
+
+ if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(personal), NULL,
CHECKUID_CHECK_FILE_AND_DIR))) {
+ RETURN_FALSE;
+ }
+
+ if (php_check_open_basedir(Z_STRVAL_PP(personal) TSRMLS_CC)) {
+ RETURN_FALSE;
+ }
+
pspell_config_replace(config, "personal", Z_STRVAL_PP(personal));
RETURN_TRUE;
@@ -768,6 +786,15 @@
pspell_config_replace(config, "save-repl", "true");
convert_to_string_ex(repl);
+
+ if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(repl), NULL,
CHECKUID_CHECK_FILE_AND_DIR))) {
+ RETURN_FALSE;
+ }
+
+ if (php_check_open_basedir(Z_STRVAL_PP(repl) TSRMLS_CC)) {
+ RETURN_FALSE;
+ }
+
pspell_config_replace(config, "repl", Z_STRVAL_PP(repl));
RETURN_TRUE;