From: Stanislav Malyshev <stas@php.net>
Date: Tue, 10 Jul 2007 17:52:32 +0000 (+0000)
Subject: always check save_path (issue reported by Maksymilian Arciemowicz)
X-Git-Tag: BEFORE_IMPORT_OF_MYSQLND~261
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=5d0a261394d9a97aaf0036a308fa70ffe558cd8d;p=php

always check save_path (issue reported by Maksymilian Arciemowicz)
---

diff --git a/ext/session/mod_files.c b/ext/session/mod_files.c
index 32f8abcc36..89395fc0ad 100644
--- a/ext/session/mod_files.c
+++ b/ext/session/mod_files.c
@@ -313,6 +313,10 @@ PS_OPEN_FUNC(files)
 	}
 	save_path = argv[argc - 1];
 
+	if (PG(open_basedir) && php_check_open_basedir(save_path TSRMLS_CC)) {
+		return FAILURE;
+	}
+
 	data = ecalloc(1, sizeof(*data));
 	
 	data->fd = -1;