iliaa Fri Aug 4 20:34:37 2006 UTC
Modified files:
/php-src/ext/imap php_imap.c
Log:
MFB: Fixed bug #37265 (Added missing safe_mode & open_basedir checks to
imap_body()).
http://cvs.php.net/viewvc.cgi/php-src/ext/imap/php_imap.c?r1=1.217&r2=1.218&diff_format=u
Index: php-src/ext/imap/php_imap.c
diff -u php-src/ext/imap/php_imap.c:1.217 php-src/ext/imap/php_imap.c:1.218
--- php-src/ext/imap/php_imap.c:1.217 Tue Jun 13 13:12:18 2006
+++ php-src/ext/imap/php_imap.c Fri Aug 4 20:34:37 2006
@@ -26,7 +26,7 @@
| PHP 4.0 updates: Zeev Suraski <[EMAIL PROTECTED]> |
+----------------------------------------------------------------------+
*/
-/* $Id: php_imap.c,v 1.217 2006/06/13 13:12:18 dmitry Exp $ */
+/* $Id: php_imap.c,v 1.218 2006/08/04 20:34:37 iliaa Exp $ */
#define IMAP41
@@ -763,6 +763,11 @@
efree(IMAPG(imap_password));
}
+ /* local filename, need to perform open_basedir checks */
+ if (Z_STRVAL_PP(mailbox)[0] != '{' &&
php_check_open_basedir(Z_STRVAL_PP(mailbox) TSRMLS_CC)) {
+ RETURN_FALSE;
+ }
+
IMAPG(imap_user) = estrndup(Z_STRVAL_PP(user), Z_STRLEN_PP(user));
IMAPG(imap_password) = estrndup(Z_STRVAL_PP(passwd),
Z_STRLEN_PP(passwd));
--
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
