(symlink) Disable symlinks to urls

@- Disable symlinks to urls

diff --git a/ext/standard/link.c b/ext/standard/link.c
index b6071d4c09688546f2b87d651c433555dfb22d2a..077d63c524b9cab59de3853e5e57f0ebda02c8e8 100644 (file)
--- a/ext/standard/link.c
+++ b/ext/standard/link.c
@@ -116,6 +116,10 @@ PHP_FUNCTION(symlink)
        if (PG(safe_mode) && !_php3_checkuid((*topath)->value.str.val, 2)) {
                RETURN_FALSE;
        }
+       if (!strncasecmp((*topath)->value.str.val,"http://",7) || !strncasecmp((*topath)->value.str.val,"ftp://",6)) {
+               php_error(E_WARNING, "Unable to symlink to a URL");
+               RETURN_FALSE;
+       }
 
        ret = symlink((*topath)->value.str.val, (*frompath)->value.str.val);
        if (ret == -1) {