Added safe_mode & open_basedir checks for pg_lo_export()

@Added safe_mode & open_basedir checks for pg_lo_export() (Yasuo)

diff --git a/ext/pgsql/pgsql.c b/ext/pgsql/pgsql.c
index 7979b11426716807f68a6bde1f6cefe540ac312a..5eb5f90685bf82c8128c11030953262c6b509ea5 100644 (file)
--- a/ext/pgsql/pgsql.c
+++ b/ext/pgsql/pgsql.c
@@ -2091,6 +2091,14 @@ PHP_FUNCTION(pg_lo_export)
                RETURN_FALSE;
        }
        
+       if (PG(safe_mode) &&(!php_checkuid(file_in, NULL, CHECKUID_CHECK_FILE_AND_DIR))) {
+               RETURN_FALSE;
+       }
+       
+       if (php_check_open_basedir(file_in TSRMLS_CC)) {
+               RETURN_FALSE;
+       }
+
        ZEND_FETCH_RESOURCE2(pgsql, PGconn *, &pgsql_link, id, "PostgreSQL link", le_link, le_plink);
 
        if (lo_export(pgsql, oid, file_out)) {