diff --git a/ext/standard/basic_functions.c b/ext/standard/basic_functions.c index 7c98613ccc0..b0607df3eae 100644 --- a/ext/standard/basic_functions.c +++ b/ext/standard/basic_functions.c @@ -2359,6 +2359,10 @@ PHP_FUNCTION(move_uploaded_file) RETURN_FALSE; } + if (php_check_open_basedir(Z_STRVAL_PP(new_path) TSRMLS_CC)) { + RETURN_FALSE; + } + VCWD_UNLINK(Z_STRVAL_PP(new_path)); if (rename(Z_STRVAL_PP(path), Z_STRVAL_PP(new_path)) == 0) { successful = 1;