From: Maxim Maletsky <maxim@php.net>
Date: Thu, 21 Nov 2002 20:28:11 +0000 (+0000)
Subject: Disabled OCIPasswordChange() in safe mode. Possible security risks.
X-Git-Tag: RELEASE_1_0b2~85
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=8338d8bfce07474fbbe5210efe4e4549bf71efee;p=php

Disabled OCIPasswordChange() in safe mode. Possible security risks.
---

diff --git a/ext/oci8/oci8.c b/ext/oci8/oci8.c
index 4ce26d6780..fd5591e4e8 100644
--- a/ext/oci8/oci8.c
+++ b/ext/oci8/oci8.c
@@ -4405,6 +4405,11 @@ PHP_FUNCTION(ocipasswordchange)
 	text *user, *pass_old, *pass_new;
 	oci_connection *connection;
 
+	/*  Disalllow in Safe Mode  */
+	if (PG(safe_mode)) {
+		RETURN_FALSE;
+	}
+
 	if (zend_get_parameters_ex(4, &conn, &user_param, &pass_old_param, &pass_new_param) == FAILURE) {
 		WRONG_PARAM_COUNT;
 	}