cvs: php-src /ext/session mod_files.c
| From: | Ilia Alshanetsky | Date: | Thu, 04 Jan 2007 23:50:19 +0000 |
| Subject: | cvs: php-src /ext/session mod_files.c | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-42554@lists.php.net to get a copy of this message | ||
iliaa Thu Jan 4 23:50:19 2007 UTC
Modified files:
/php-src/ext/session mod_files.c
Log:
MFB: Added missing open_basedir checks
http://cvs.php.net/viewvc.cgi/php-src/ext/session/mod_files.c?r1=1.107&r2=1.108&diff_format=u
Index: php-src/ext/session/mod_files.c
diff -u php-src/ext/session/mod_files.c:1.107 php-src/ext/session/mod_files.c:1.108
--- php-src/ext/session/mod_files.c:1.107 Thu Jan 4 22:04:38 2007
+++ php-src/ext/session/mod_files.c Thu Jan 4 23:50:19 2007
@@ -16,7 +16,7 @@
+----------------------------------------------------------------------+
*/
-/* $Id: mod_files.c,v 1.107 2007/01/04 22:04:38 pollita Exp $ */
+/* $Id: mod_files.c,v 1.108 2007/01/04 23:50:19 iliaa Exp $ */
#include "php.h"
@@ -255,6 +255,10 @@
if (*save_path == '\0') {
/* if save path is an empty string, determine the temporary dir */
save_path = php_get_temporary_directory();
+
+ if (php_check_open_basedir(save_path TSRMLS_CC)) {
+ return FAILURE;
+ }
}
/* split up input parameter */