From: [EMAIL PROTECTED]
Operating system: Debian GNU/Linux sid
PHP version: 4.0.6
PHP Bug Type: Directory function related
Bug description: (In safe mode) The UID check in chdir don't test the good directory
In safe mode, when you chdir a specific directory, it does not test the UID
of directory but the UID of the directory below.
Let's say we do a chdir ("/home/benoit");
In safe mode, it will test the UID of /home against the one of the script
so it fails.
If we do a chdir ("/home/benoit/."); , PHP test the UID of /home/benoit/
against the UID of the script and succeed.
But, logically, the two commands should succeed the same way.
I think it's related to the code in "ext/standard/dir.c" around line 286
:
> if (PG(safe_mode) && !php_checkuid((*arg)->value.str.val, NULL,
CHECKUID_ALLOW_ONLY_DIR)) {
and the way php_checkuid handle CHECKUID_ALLOW_ONLY_DIR.
--
Edit bug report at: http://bugs.php.net/?id=12255&edit=1
--
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]
