archive/php-src
1
0
Fork 0
mirror of https://github.com/php/php-src.git synced 2025-08-15 21:48:51 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Fixed bug #26974 (rename() doesn't check the destination file

Browse source 
against safe_mode/open_basedir).
This commit is contained in:
Ilia Alshanetsky 2004-01-21 02:28:50 +00:00
parent e36f5fb08b
commit eb3ff409b0
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
main/streams/plain_wrapper.c
View file

@ -973,11 +973,12 @@ static int php_plain_files_rename(php_stream_wrapper *wrapper, char *url_from, c
url_to = p + 3;
}
if (PG(safe_mode) &&(!php_checkuid(url_from, NULL, CHECKUID_CHECK_FILE_AND_DIR))) {
if (PG(safe_mode) && (!php_checkuid(url_from, NULL, CHECKUID_CHECK_FILE_AND_DIR) ||
!php_checkuid(url_to, NULL, CHECKUID_CHECK_FILE_AND_DIR))) {
return 0;
}
if (php_check_open_basedir(url_from TSRMLS_CC)) {
if (php_check_open_basedir(url_from TSRMLS_CC) || php_check_open_basedir(url_to TSRMLS_CC)) {
return 0;
}