MFH: Further URL validations in safe_mode/open_basedir configs.

diff --git a/ext/curl/interface.c b/ext/curl/interface.c
index 2c0865eabf5996e2ba1150d639fd4d3c2584f538..191b894728b2987a29801956297e6c06ecd8ec8b 100644 (file)
--- a/ext/curl/interface.c
+++ b/ext/curl/interface.c
@@ -75,7 +75,7 @@ static void _php_curl_close(zend_rsrc_list_entry *rsrc TSRMLS_DC);
                        RETURN_FALSE;                                                                                                                                           \
                }                                                                                                                                                                               \
                                                                                                                                                                                                \
-               if (php_check_open_basedir(tmp_url->path TSRMLS_CC) ||                                                                  \
+               if (tmp_url->query || php_check_open_basedir(tmp_url->path TSRMLS_CC) ||                                                                        \
                        (PG(safe_mode) && !php_checkuid(tmp_url->path, "rb+", CHECKUID_CHECK_MODE_PARAM))       \
                ) {                                                                                                                                                                     \
                        php_url_free(tmp_url);                                                                                                                          \