Additional open_basedir/safe_mode checks.

diff --git a/ext/curl/interface.c b/ext/curl/interface.c
index 2a3a796c6b817a4188266dae04e1140612dd3e6b..75e4b5ba685eb18d75e1455a1953eb810e914758 100644 (file)
--- a/ext/curl/interface.c
+++ b/ext/curl/interface.c
@@ -119,7 +119,7 @@ static void _php_curl_close(zend_rsrc_list_entry *rsrc TSRMLS_DC);
                        RETURN_FALSE;                                                                                                                                           \
                }                                                                                                                                                                               \
                                                                                                                                                                                                \
-               if (tmp_url->query || php_check_open_basedir(tmp_url->path TSRMLS_CC) ||                                                                        \
+               if (tmp_url->query || tmp_url->fragment || php_check_open_basedir(tmp_url->path TSRMLS_CC) ||                                                                   \
                        (PG(safe_mode) && !php_checkuid(tmp_url->path, "rb+", CHECKUID_CHECK_MODE_PARAM))       \
                ) {                                                                                                                                                                     \
                        php_url_free(tmp_url);                                                                                                                          \