php/archived-php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2026-03-26 01:02:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fixed bug #26974 (rename() doesn't check the destination file

Browse Source 
against safe_mode/open_basedir).
This commit is contained in:
Ilia Alshanetsky
2004-01-21 02:28:50 +00:00
parent e36f5fb08b
commit eb3ff409b0
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
main/streams/plain_wrapper.c
View File

@@ -973,11 +973,12 @@ static int php_plain_files_rename(php_stream_wrapper *wrapper, char *url_from, c
url_to = p + 3;
}
if (PG(safe_mode) &&(!php_checkuid(url_from, NULL, CHECKUID_CHECK_FILE_AND_DIR))) {
if (PG(safe_mode) && (!php_checkuid(url_from, NULL, CHECKUID_CHECK_FILE_AND_DIR) ||
!php_checkuid(url_to, NULL, CHECKUID_CHECK_FILE_AND_DIR))) {
return 0;
}
if (php_check_open_basedir(url_from TSRMLS_CC)) {
if (php_check_open_basedir(url_from TSRMLS_CC) || php_check_open_basedir(url_to TSRMLS_CC)) {
return 0;
}