Disabled OCIPasswordChange() in safe mode. Possible security risks.

diff --git a/ext/oci8/oci8.c b/ext/oci8/oci8.c
index 4ce26d6780d5b3124e364c1c134da9cc747d7a46..fd5591e4e8e47c9b80ffb642693a2201bae1e0a6 100644 (file)
--- a/ext/oci8/oci8.c
+++ b/ext/oci8/oci8.c
@@ -4405,6 +4405,11 @@ PHP_FUNCTION(ocipasswordchange)
        text *user, *pass_old, *pass_new;
        oci_connection *connection;
 
+       /*  Disalllow in Safe Mode  */
+       if (PG(safe_mode)) {
+               RETURN_FALSE;
+       }
+
        if (zend_get_parameters_ex(4, &conn, &user_param, &pass_old_param, &pass_new_param) == FAILURE) {
                WRONG_PARAM_COUNT;
        }