cvs: php-src(PHP_4_4) /ext/standard info.c
| From: | Ilia Alshanetsky | Date: | Mon, 15 Aug 2005 16:06:09 +0000 |
| Subject: | cvs: php-src(PHP_4_4) /ext/standard info.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-33402@lists.php.net to get a copy of this message | ||
iliaa Mon Aug 15 12:06:09 2005 EDT
Modified files: (Branch: PHP_4_4)
/php-src/ext/standard info.c
Log:
MFH: input validation
http://cvs.php.net/diff.php/php-src/ext/standard/info.c?r1=1.218.2.18.2.1&r2=1.218.2.18.2.2&ty=u
Index: php-src/ext/standard/info.c
diff -u php-src/ext/standard/info.c:1.218.2.18.2.1 php-src/ext/standard/info.c:1.218.2.18.2.2
--- php-src/ext/standard/info.c:1.218.2.18.2.1 Tue Jun 7 09:37:33 2005
+++ php-src/ext/standard/info.c Mon Aug 15 12:06:08 2005
@@ -18,7 +18,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: info.c,v 1.218.2.18.2.1 2005/06/07 13:37:33 derick Exp $ */
+/* $Id: info.c,v 1.218.2.18.2.2 2005/08/15 16:06:08 iliaa Exp $ */
#include "php.h"
#include "php_ini.h"
@@ -133,10 +133,21 @@
PUTS(" => ");
}
if (Z_TYPE_PP(tmp) == IS_ARRAY) {
+ zval *tmp3;
+ MAKE_STD_ZVAL(tmp3);
if (!sapi_module.phpinfo_as_text) {
PUTS("<pre>");
}
+ php_start_ob_buffer(NULL, 0, 1 TSRMLS_CC);
zend_print_zval_r(*tmp, 0);
+ php_ob_get_buffer(tmp3 TSRMLS_CC);
+ php_end_ob_buffer(0, 0 TSRMLS_CC);
+
+ elem_esc = php_info_html_esc(Z_STRVAL_P(tmp3) TSRMLS_CC);
+ PUTS(elem_esc);
+ efree(elem_esc);
+ zval_ptr_dtor(&tmp3);
+
if (!sapi_module.phpinfo_as_text) {
PUTS("</pre>");
}