mirror of
https://github.com/php/php-src.git
synced 2026-03-26 09:12:14 +01:00
Further URL validations in safe_mode/open_basedir configs.
This commit is contained in:
@@ -75,7 +75,7 @@ static void _php_curl_close(zend_rsrc_list_entry *rsrc TSRMLS_DC);
|
||||
RETURN_FALSE; \
|
||||
} \
|
||||
\
|
||||
if (php_check_open_basedir(tmp_url->path TSRMLS_CC) || \
|
||||
if (tmp_url->query || php_check_open_basedir(tmp_url->path TSRMLS_CC) || \
|
||||
(PG(safe_mode) && !php_checkuid(tmp_url->path, "rb+", CHECKUID_CHECK_MODE_PARAM)) \
|
||||
) { \
|
||||
php_url_free(tmp_url); \
|
||||
|
||||
Reference in New Issue
Block a user