MFH - safe-mode show_source() fix

diff --git a/ext/standard/basic_functions.c b/ext/standard/basic_functions.c
index 2fae423907989254f9755c9fe1d4b36472abd344..26aef54e7b012e7975864785f5a4ceab23b6ff20 100644 (file)
--- a/ext/standard/basic_functions.c
+++ b/ext/standard/basic_functions.c
@@ -1889,6 +1889,14 @@ PHP_FUNCTION(highlight_file)
        }
        convert_to_string(filename);
 
+       if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_P(filename), NULL, CHECKUID_ALLOW_ONLY_FILE))) {
+               RETURN_FALSE;
+       }
+
+       if (php_check_open_basedir(Z_STRVAL_P(filename) TSRMLS_CC)) {
+               RETURN_FALSE;
+       }
+
        if (i) {
                php_start_ob_buffer (NULL, 0, 1 TSRMLS_CC);
        }