From: Ilia Alshanetsky <iliaa@php.net>
Date: Thu, 12 Jun 2003 01:47:28 +0000 (+0000)
Subject: MFH: Added missing safe_mode/open_basedir checks.
X-Git-Tag: php-4.3.3RC1~68
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=cfc8c7a95e4ee590fb1d139743c17cc5f164d94d;p=php

MFH: Added missing safe_mode/open_basedir checks.
---

diff --git a/ext/pspell/pspell.c b/ext/pspell/pspell.c
index b05e5c3a08..f31882a840 100644
--- a/ext/pspell/pspell.c
+++ b/ext/pspell/pspell.c
@@ -206,6 +206,15 @@ PHP_FUNCTION(pspell_new_personal)
 	config = new_pspell_config();
 
 	convert_to_string_ex(personal);
+
+	if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(personal), NULL, CHECKUID_CHECK_FILE_AND_DIR))) {
+		RETURN_FALSE;
+	}
+
+	if (php_check_open_basedir(Z_STRVAL_PP(personal) TSRMLS_CC)) {
+		RETURN_FALSE;
+	}
+
 	pspell_config_replace(config, "personal", Z_STRVAL_PP(personal));
 	pspell_config_replace(config, "save-repl", "false");
 
@@ -737,6 +746,15 @@ PHP_FUNCTION(pspell_config_personal)
 	}
 
 	convert_to_string_ex(personal);
+
+	if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(personal), NULL, CHECKUID_CHECK_FILE_AND_DIR))) {
+		RETURN_FALSE;
+	}
+
+	if (php_check_open_basedir(Z_STRVAL_PP(personal) TSRMLS_CC)) {
+		RETURN_FALSE;
+	}
+
 	pspell_config_replace(config, "personal", Z_STRVAL_PP(personal));
 
 	RETURN_TRUE;
@@ -768,6 +786,15 @@ PHP_FUNCTION(pspell_config_repl)
 	pspell_config_replace(config, "save-repl", "true");
 
 	convert_to_string_ex(repl);
+
+	if (PG(safe_mode) && (!php_checkuid(Z_STRVAL_PP(repl), NULL, CHECKUID_CHECK_FILE_AND_DIR))) {
+		RETURN_FALSE;
+	}
+
+	if (php_check_open_basedir(Z_STRVAL_PP(repl) TSRMLS_CC)) {
+		RETURN_FALSE;
+	}
+
 	pspell_config_replace(config, "repl", Z_STRVAL_PP(repl));
 
 	RETURN_TRUE;