summaryrefslogtreecommitdiff
path: root/UPGRADING
diff options
context:
space:
mode:
authorDarek Slusarczyk <dariusz.slusarczyk@oracle.com>2021-02-22 11:03:24 +0100
committerNikita Popov <nikita.ppv@gmail.com>2021-02-23 09:30:46 +0100
commitda011a312a6c6cd7ff12fe1aa0de1e33fba2f167 (patch)
treec3e37dadfa5ea7aec39ca3695779fe30c7bd96f6 /UPGRADING
parent7f8ea83ef438fbcfa1cbc636d701491d4e773245 (diff)
downloadphp-git-da011a312a6c6cd7ff12fe1aa0de1e33fba2f167.tar.gz
Fix #80329: Add option to specify LOAD DATA LOCAL white list folder
* allow the user to specify a folder where files that can be sent via LOAD DATA LOCAL can exist * add mysqli.local_infile_directory for mysqli (ignored if mysqli.allow_local_infile is enabled) * add PDO::MYSQL_ATTR_LOCAL_INFILE_DIRECTORY for pdo_mysql (ignored if PDO::MYSQL_ATTR_LOCAL_INFILE is enabled) * add related tests * fixes for building with libmysql 8.x * small improvement in existing tests * update php.ini-[development|production] files Closes GH-6448. Co-authored-by: Nikita Popov <nikic@php.net>
Diffstat (limited to 'UPGRADING')
-rw-r--r--UPGRADING12
1 files changed, 12 insertions, 0 deletions
diff --git a/UPGRADING b/UPGRADING
index eb01058a5a..f5c00596e4 100644
--- a/UPGRADING
+++ b/UPGRADING
@@ -176,6 +176,18 @@ PHP 8.1 UPGRADE NOTES
Note, that the quality of the custom secret is crucial for the quality of the resulting hash. It is
highly recommended for the secret to use the best possible entropy.
+- MySQLi:
+ . The mysqli.local_infile_directory ini setting has been added, which can be
+ used to specify a directory from which files are allowed to be loaded. It
+ is only meaningful if mysqli.allow_local_infile is not enabled, as all
+ directories are allowed in that case.
+
+- PDO MySQL:
+ . The PDO::MYSQL_ATTR_LOCAL_INFILE_DIRECTORY attribute has been added, which
+ can be used to specify a directory from which files are allowed to be
+ loaded. It is only meaningful if PDO::MYSQL_ATTR_LOCAL_INFILE is not
+ enabled, as all directories are allowed in that case.
+
- PDO SQLite:
. SQLite's "file:" DSN syntax is now supported, which allows specifying
additional flags. This feature is not available if open_basedir is set.