From 6de75a77c671e3a0971ffa896018025af114a42a Mon Sep 17 00:00:00 2001 From: Ilia Alshanetsky Date: Sun, 17 Apr 2005 18:05:03 +0000 Subject: Added missing safe_mode & open_basedir checks. --- ext/xmlreader/php_xmlreader.c | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'ext/xmlreader/php_xmlreader.c') diff --git a/ext/xmlreader/php_xmlreader.c b/ext/xmlreader/php_xmlreader.c index 191f878c91..1de031aa51 100644 --- a/ext/xmlreader/php_xmlreader.c +++ b/ext/xmlreader/php_xmlreader.c @@ -229,6 +229,14 @@ char *_xmlreader_get_valid_file_path(char *source, char *resolved_path, int reso xmlFreeURI(uri); + if (PG(safe_mode) && (!php_checkuid(file_dest, NULL, CHECKUID_CHECK_FILE_AND_DIR))) { + return NULL; + } + + if (php_check_open_basedir(file_dest TSRMLS_CC)) { + return NULL; + } + return file_dest; } -- cgit v1.2.1