[PHP-CVS] cvs: php-src /ext/standard dir.c

[Ilia Alshanetsky]

iliaa           Wed Oct  4 23:20:54 2006 UTC

  Modified files:              
    /php-src/ext/standard       dir.c 
  Log:
  MFB: Fixed missing open_basedir check inside chdir() function.
  
  
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/dir.c?r1=1.157&r2=1.158&diff_format=u
Index: php-src/ext/standard/dir.c
diff -u php-src/ext/standard/dir.c:1.157 php-src/ext/standard/dir.c:1.158
--- php-src/ext/standard/dir.c:1.157    Mon Oct  2 18:14:42 2006
+++ php-src/ext/standard/dir.c  Wed Oct  4 23:20:54 2006
@@ -16,7 +16,7 @@
    +----------------------------------------------------------------------+
  */
 
-/* $Id: dir.c,v 1.157 2006/10/02 18:14:42 pollita Exp $ */
+/* $Id: dir.c,v 1.158 2006/10/04 23:20:54 iliaa Exp $ */
 
 /* {{{ includes/startup/misc */
 
@@ -310,7 +310,9 @@
                php_stream_path_param_encode(ppstr, &str, &str_len, 
REPORT_ERRORS, FG(default_context)) == FAILURE) {
                return;
        }
-
+       if (php_check_open_basedir(str TSRMLS_CC)) {
+               RETURN_FALSE;
+       }
        ret = VCWD_CHDIR(str);
        if (ret != 0) {
                php_error_docref(NULL TSRMLS_CC, E_WARNING, "%s (errno %d)", 
strerror(errno), errno);

-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php