archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-16 05:58:45 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

(_ps_files_open): evaluate key (session id) before path creation

Browse source
This commit is contained in:
Sascha Schumann 1999-10-21 12:28:36 +00:00
parent 230556b646
commit 4703eb404d
1 changed files with 28 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

29
ext/session/mod_files.c
View file

@ -61,6 +61,32 @@ ps_module ps_mod_files = {
#define DIR_DELIMITER '/'
#endif
static int _ps_files_valid_key(const char *key)
{
size_t len;
const char *p;
char c;
int ret = 1;
for(p = key; (c = *p); p++) {
/* valid characters are a..z,A..Z,0..9 */
if(!(c >= 'a' && c <= 'z') ||
(c >= 'A' && c <= 'Z') ||
(c >= '0' && c <= '9')) {
ret = 0;
break;
}
}
len = p - key;
if(len == 0) {
ret = 0;
}
return ret;
}
static char *_ps_files_path_create(char *buf, size_t buflen, ps_files *data, const char *key)
{
int keylen;
@ -98,7 +124,8 @@ static void _ps_files_open(ps_files *data, const char *key)
data->fd = -1;
}
if(!_ps_files_path_create(buf, sizeof(buf), data, key))
if(!_ps_files_valid_key(key) ||
!_ps_files_path_create(buf, sizeof(buf), data, key))
return;
data->lastkey = estrdup(key);