cvs: php-src(PHP_5_0) /ext/curl interface.c
| From: | Ilia Alshanetsky | Date: | Mon, 17 Oct 2005 02:42:32 +0000 |
| Subject: | cvs: php-src(PHP_5_0) /ext/curl interface.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-34617@lists.php.net to get a copy of this message | ||
iliaa Sun Oct 16 22:42:32 2005 EDT
Modified files: (Branch: PHP_5_0)
/php-src/ext/curl interface.c
Log:
MFH: Further URL validations in safe_mode/open_basedir configs.
http://cvs.php.net/diff.php/php-src/ext/curl/interface.c?r1=1.46.2.10&r2=1.46.2.11&ty=u
Index: php-src/ext/curl/interface.c
diff -u php-src/ext/curl/interface.c:1.46.2.10 php-src/ext/curl/interface.c:1.46.2.11
--- php-src/ext/curl/interface.c:1.46.2.10 Thu Oct 6 16:42:59 2005
+++ php-src/ext/curl/interface.c Sun Oct 16 22:42:32 2005
@@ -16,7 +16,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: interface.c,v 1.46.2.10 2005/10/06 20:42:59 iliaa Exp $ */
+/* $Id: interface.c,v 1.46.2.11 2005/10/17 02:42:32 iliaa Exp $ */
#define ZEND_INCLUDE_FULL_WINDOWS_HEADERS
@@ -72,7 +72,7 @@
RETURN_FALSE; \
} \
\
- if (php_check_open_basedir(tmp_url->path TSRMLS_CC) || \
+ if (tmp_url->query || php_check_open_basedir(tmp_url->path TSRMLS_CC) || \
(PG(safe_mode) && !php_checkuid(tmp_url->path, "rb+",
CHECKUID_CHECK_MODE_PARAM)) \
) { \
php_url_free(tmp_url); \