(PHP opendir) Added safe_mode checks on path.

@- Added safe_mode checks for opendir(). (jflemer)

diff --git a/ext/standard/dir.c b/ext/standard/dir.c
index 894578b2d0a186f9d0428e82ff3a24720cf1276e..86f8b2b08ee7a2c79f56486d3364722600f0ae2a 100644 (file)
--- a/ext/standard/dir.c
+++ b/ext/standard/dir.c
@@ -151,6 +151,10 @@ static void _php_do_opendir(INTERNAL_FUNCTION_PARAMETERS, int createobject)
                RETURN_FALSE;
        }
        
+       if (PG(safe_mode) &&(!php_checkuid(Z_STRVAL_PP(arg), NULL, CHECKUID_ALLOW_ONLY_DIR))) {
+               RETURN_FALSE;
+       }
+       
        dirp = emalloc(sizeof(php_dir));
 
        dirp->dir = VCWD_OPENDIR(Z_STRVAL_PP(arg));