Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | - Year++ | Felipe Pena | 2012-01-01 | 1 | -1/+1 |
| | |||||
* | Fixed built (missing 2nd arg for strncpy) | Xinchen Hui | 2011-08-09 | 1 | -1/+1 |
| | |||||
* | Avoiding strcpy, strcat, sprintf usage to make static analyzer happy | Xinchen Hui | 2011-08-09 | 1 | -2/+3 |
| | |||||
* | - fix regression introduced in 5.3.4 in open_basedir on windows/novell with ↵ | Pierre Joye | 2011-01-18 | 1 | -0/+4 |
| | | | | trailing fwd slash | ||||
* | - Year++ | Felipe Pena | 2011-01-01 | 1 | -1/+1 |
| | |||||
* | - fixed #53352 | Pierre Joye | 2010-11-23 | 1 | -1/+4 |
| | |||||
* | - fix #39863, do not accept paths with NULL in them. See ↵ | Pierre Joye | 2010-11-18 | 1 | -0/+4 |
| | | | | http://news.php.net/php.internals/50191, trunk will have the patch later (adding a macro and/or changing (some) APIs. Patch by Rasmus | ||||
* | Fix bug #53226 (file_exists fails on big filenames). | Adam Harvey | 2010-11-05 | 1 | -0/+8 |
| | |||||
* | - Fixed possible flaw in open_basedir (CVE-2010-3436) | Pierre Joye | 2010-09-28 | 1 | -2/+7 |
| | |||||
* | - open_basedir symlink support for Windows | Pierre Joye | 2010-09-10 | 1 | -12/+18 |
| | |||||
* | - Fixed bug #51627 (script path not correctly evaluated) | Felipe Pena | 2010-04-21 | 1 | -2/+2 |
| | | | | | Patch by: russell dot tempero at rightnow dot com | ||||
* | sed -i "s#1997-2009#1997-2010#g" **/*.c **/*.h **/*.php | Sebastian Bergmann | 2010-01-03 | 1 | -1/+1 |
| | |||||
* | Fixed bug #50159 (wrong working directory in symlinked files) | Dmitry Stogov | 2009-11-30 | 1 | -28/+35 |
| | |||||
* | - Simplified a bit and fixed possible memory corruption and definate leak. | Jani Taskinen | 2009-09-10 | 1 | -0/+1 |
| | |||||
* | - Fixed bug #49182 (PHP CGI always outputs the shebang line) | Jani Taskinen | 2009-09-05 | 1 | -10/+24 |
| | |||||
* | Fix bug #48880 | Rasmus Lerdorf | 2009-07-31 | 1 | -1/+1 |
| | | | | | | The ini entry was being corrupted because it wasn't being set on the ACTIVATE and DEACTIVATE stages. | ||||
* | Ah, broken vimrc.. | Rasmus Lerdorf | 2009-06-18 | 1 | -3/+3 |
| | |||||
* | Fix bug #48592 | Rasmus Lerdorf | 2009-06-18 | 1 | -1/+3 |
| | |||||
* | Adjust condition | Ilia Alshanetsky | 2009-02-10 | 1 | -1/+1 |
| | |||||
* | MFB: Added path truncation E_NOTICE to let people now when path resolving | Ilia Alshanetsky | 2009-02-10 | 1 | -1/+3 |
| | | | | | caused the file path to be truncated. | ||||
* | MFH: Bump copyright year, 3 of 3. | Sebastian Bergmann | 2008-12-31 | 1 | -1/+1 |
| | |||||
* | MFH: - Changed open_basedir to allow tightening in runtime contexts. (Sara) | Hannes Magnusson | 2008-12-09 | 1 | -0/+56 |
| | | | | | - Add test | ||||
* | MFH: Missing files in previous commit (Check the relevant path for open_basedir | Arnaud Le Blanc | 2008-08-11 | 1 | -1/+18 |
| | | | | | in symlink()) | ||||
* | Removed shebang line check from CGI sapi (it is checked by scanner) | Dmitry Stogov | 2008-08-04 | 1 | -23/+11 |
| | |||||
* | Fixed chdir() into requested file directory inconsistencies | Dmitry Stogov | 2008-07-21 | 1 | -3/+0 |
| | |||||
* | Added ability to use stream wrappers in include_path | Dmitry Stogov | 2008-03-27 | 1 | -4/+59 |
| | |||||
* | Fixed ws and comment | Dmitry Stogov | 2008-03-24 | 1 | -4/+4 |
| | |||||
* | Disable path resolution for filenames with stream wrappers | Dmitry Stogov | 2008-03-13 | 1 | -2/+10 |
| | | | | | More careful check for relative pathes (./xxx and ../xxx) | ||||
* | Optimized require_once() and include_once() by eliminationg open() syscall ↵ | Dmitry Stogov | 2008-03-05 | 1 | -0/+74 |
| | | | | on second usage. | ||||
* | Fixed bug #43491 (Under certain conditions, file_exists() never returns) | Dmitry Stogov | 2008-01-29 | 1 | -0/+3 |
| | |||||
* | MFH: Bump copyright year, 2 of 2. | Sebastian Bergmann | 2007-12-31 | 1 | -1/+1 |
| | |||||
* | Fixed bug#43105 (PHP seems to fail to close open files.) | Hannes Magnusson | 2007-12-27 | 1 | -0/+1 |
| | |||||
* | MFH: Fix expand_filepath when including relative files, ideally you should ↵ | Scott MacVicar | 2007-10-09 | 1 | -1/+3 |
| | | | | test you code... | ||||
* | MFH: ws + cs | Jani Taskinen | 2007-10-09 | 1 | -76/+74 |
| | |||||
* | Fix for bug 41822. expand_filepath() will now return a relative path under ↵ | Robert Thompson | 2007-10-08 | 1 | -11/+23 |
| | | | | the specific situation where getcwd() returns NULL and the file is still readable. As far as I have been able to tell, this fix only applies to the Solaris OS where files in directories with (--x) cannot getcwd(). | ||||
* | Fixed symlink("", "somthing") and link("", "somthing") in ZTS mode | Dmitry Stogov | 2007-07-10 | 1 | -1/+3 |
| | |||||
* | MFH: fix #41518 (file_exists() warns of open_basedir restriction on ↵ | Antony Dovgal | 2007-06-01 | 1 | -1/+11 |
| | | | | non-existent file) | ||||
* | Fixed endless loop in open_basedir check | Dmitry Stogov | 2007-04-18 | 1 | -0/+2 |
| | |||||
* | fix #40931 (open_basedir bypass via symlink and move_uploaded_file()) | Antony Dovgal | 2007-04-10 | 1 | -3/+63 |
| | |||||
* | - Avoid sprintf, even when checked copy'n'paste or changes lead to errors | Marcus Boerger | 2007-02-24 | 1 | -6/+3 |
| | |||||
* | Fix build | Hannes Magnusson | 2007-01-12 | 1 | -0/+1 |
| | | | | | #Thanks Andy | ||||
* | MFH | Antony Dovgal | 2007-01-12 | 1 | -0/+3 |
| | |||||
* | Fixed bug #40098 (php_fopen_primary_script() not thread safe). | Ilia Alshanetsky | 2007-01-12 | 1 | -8/+22 |
| | | | | | Adjusted previous fixes for similar issue to handle sysconf() failures | ||||
* | MFH: Bump year. | Sebastian Bergmann | 2007-01-01 | 1 | -1/+1 |
| | |||||
* | fix #39575 (move_uploaded_file() no longer working (safe mode related)) | Antony Dovgal | 2006-11-22 | 1 | -1/+1 |
| | |||||
* | Removed unnecessary checks for ISREG file and corresponding stat() calls on ↵ | Dmitry Stogov | 2006-11-10 | 1 | -0/+5 |
| | | | | Windows | ||||
* | Simplify the code base as this getpwd() was used only once | Dmitry Stogov | 2006-11-10 | 1 | -4/+0 |
| | |||||
* | add const keywords | Nuno Lopes | 2006-07-01 | 1 | -3/+3 |
| | |||||
* | Eliminated unnecessary getcwd() syscall | Dmitry Stogov | 2006-03-17 | 1 | -2/+6 |
| | |||||
* | bump year and license version | foobar | 2006-01-01 | 1 | -3/+3 |
| |