Implement safe_mode and open_basedir checks.

Add package.xml

diff --git a/ext/sqlite/package.xml b/ext/sqlite/package.xml
new file mode 100644 (file)
index 0000000..72668de
--- /dev/null
+++ b/ext/sqlite/package.xml
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="ISO-8859-1" ?>
+<!DOCTYPE package SYSTEM "../../../php4/pear/package.dtd">
+<package>
+  <name>SQLite</name>
+  <summary>SQLite database bindings</summary>
+  <maintainers>
+    <maintainer>
+      <user>wez</user>
+      <name>Wez Furlong</name>
+      <email>wez@php.net</email>
+      <role>lead</role>
+    </maintainer>
+  </maintainers>
+  <description>
+       SQLite is a C library that implements an embeddable SQL database engine.
+       Programs that link with the SQLite library can have SQL database access
+       without running a separate RDBMS process.
+       This extension allows you to access SQLite databases from within PHP.
+  </description>
+  <license>PHP</license>
+  <release>
+    <state>beta</state>
+    <version>0.5</version>
+    <date>2003-04-17</date>
+       <notes>
+               Initial release
+    </notes>
+    <filelist>
+      <file role="src" name="config.m4"/>
+      <file role="src" name="sqlite.c"/>
+      <file role="src" name="php_sqlite.h"/>
+      <file role="doc" name="CREDITS"/>
+      <file role="doc" name="README"/>
+      <file role="doc" name="TODO"/>
+      <file role="doc" name="sqlite.php"/>
+      <file role="test" name="tests/001.phpt"/>
+    </filelist>
+  </release>
+</package>

diff --git a/ext/sqlite/sqlite.c b/ext/sqlite/sqlite.c
index 39d193f4477f9828c72d01c7bf17ca40f743c1fe..7ff5a20e736461f5dca821b5481ad7685da55d7f 100644 (file)
--- a/ext/sqlite/sqlite.c
+++ b/ext/sqlite/sqlite.c
@@ -135,7 +135,13 @@ PHP_FUNCTION(sqlite_open)
                return;
        }
 
-       /* TODO: safemode and open_basedir checks on the filename */
+       if (PG(safe_mode) && (!php_checkuid(filename, NULL, CHECKUID_CHECK_FILE_AND_DIR))) {
+               RETURN_FALSE;
+       }
+
+       if (php_check_open_basedir(filename TSRMLS_CC)) {
+               RETURN_FALSE;
+       }
        
        db = sqlite_open(filename, mode, &errtext);