MFH

diff --git a/ext/standard/filestat.c b/ext/standard/filestat.c
index deb6605db95c7904db8a0f2bfc24a7cc3e7a76dc..fcf5e583e81663d163f7ea6cc3cabcecfbfe6230 100644 (file)
--- a/ext/standard/filestat.c
+++ b/ext/standard/filestat.c
@@ -553,6 +553,14 @@ static void php_stat(const char *filename, php_stat_len filename_length, int typ
        char *stat_sb_names[13]={"dev", "ino", "mode", "nlink", "uid", "gid", "rdev",
                              "size", "atime", "mtime", "ctime", "blksize", "blocks"};
 
+       if (PG(safe_mode) &&(!php_checkuid(filename, NULL, CHECKUID_CHECK_FILE_AND_DIR))) {
+               RETURN_FALSE;
+       }
+
+       if (php_check_open_basedir(filename TSRMLS_CC)) {
+               RETURN_FALSE;
+       }
+
        stat_sb = &BG(sb);
 
        if (!BG(CurrentStatFile) || strcmp(filename, BG(CurrentStatFile))) {