From: Ilia Alshanetsky Date: Mon, 17 Oct 2005 02:42:17 +0000 (+0000) Subject: Further URL validations in safe_mode/open_basedir configs. X-Git-Tag: RELEASE_0_9_1~101 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=21979641ca2f6b0c8185d8564f66ef5e94e92109;p=php Further URL validations in safe_mode/open_basedir configs. --- diff --git a/ext/curl/interface.c b/ext/curl/interface.c index 7a70093db3..ace8a5a9f5 100644 --- a/ext/curl/interface.c +++ b/ext/curl/interface.c @@ -75,7 +75,7 @@ static void _php_curl_close(zend_rsrc_list_entry *rsrc TSRMLS_DC); RETURN_FALSE; \ } \ \ - if (php_check_open_basedir(tmp_url->path TSRMLS_CC) || \ + if (tmp_url->query || php_check_open_basedir(tmp_url->path TSRMLS_CC) || \ (PG(safe_mode) && !php_checkuid(tmp_url->path, "rb+", CHECKUID_CHECK_MODE_PARAM)) \ ) { \ php_url_free(tmp_url); \