MFH: Improved safe_mode/open_basedir check (Ilia)

dstogov · dstogov · commit 3fdcf7cf6224 · 2005-11-29T11:03:29.000Z
diff --git a/ext/curl/interface.c b/ext/curl/interface.c
@@ -72,7 +72,7 @@ static void _php_curl_close(zend_rsrc_list_entry *rsrc TSRMLS_DC);
 			RETURN_FALSE; 																		\
 		} 																						\
 																								\
-		if (tmp_url->query || php_check_open_basedir(tmp_url->path TSRMLS_CC) || 									\
+		if (tmp_url->query || tmp_url->fragment || php_check_open_basedir(tmp_url->path TSRMLS_CC) || 									\
 			(PG(safe_mode) && !php_checkuid(tmp_url->path, "rb+", CHECKUID_CHECK_MODE_PARAM))	\
 		) { 																					\
 			php_url_free(tmp_url); 																\

Original file line number	Diff line number	Diff line change
`@@ -72,7 +72,7 @@ static void _php_curl_close(zend_rsrc_list_entry *rsrc TSRMLS_DC);`
`72`	`72`	`RETURN_FALSE; \`
`73`	`73`	`} \`
`74`	`74`	`\`
`75`		`- if (tmp_url->query \|\| php_check_open_basedir(tmp_url->path TSRMLS_CC) \|\| \`
	`75`	`+ if (tmp_url->query \|\| tmp_url->fragment \|\| php_check_open_basedir(tmp_url->path TSRMLS_CC) \|\| \`
`76`	`76`	`(PG(safe_mode) && !php_checkuid(tmp_url->path, "rb+", CHECKUID_CHECK_MODE_PARAM)) \`
`77`	`77`	`) { \`
`78`	`78`	`php_url_free(tmp_url); \`