From: Ilia Alshanetsky <iliaa@php.net>
Date: Fri, 4 Aug 2006 20:34:37 +0000 (+0000)
Subject: MFB: Fixed bug #37265 (Added missing safe_mode & open_basedir checks to
X-Git-Tag: RELEASE_1_0_0RC1~2090
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=f2136c69c61f5ca0773b82d5a13fb6115f39b6dd;p=php

MFB: Fixed bug #37265 (Added missing safe_mode & open_basedir checks to
imap_body()).
---

diff --git a/ext/imap/php_imap.c b/ext/imap/php_imap.c
index b564d970be..202389ffe1 100644
--- a/ext/imap/php_imap.c
+++ b/ext/imap/php_imap.c
@@ -763,6 +763,11 @@ static void php_imap_do_open(INTERNAL_FUNCTION_PARAMETERS, int persistent)
 		efree(IMAPG(imap_password));
 	}
 
+	/* local filename, need to perform open_basedir checks */
+	if (Z_STRVAL_PP(mailbox)[0] != '{' && php_check_open_basedir(Z_STRVAL_PP(mailbox) TSRMLS_CC)) {
+		RETURN_FALSE;
+	}
+
 	IMAPG(imap_user)     = estrndup(Z_STRVAL_PP(user), Z_STRLEN_PP(user));
 	IMAPG(imap_password) = estrndup(Z_STRVAL_PP(passwd), Z_STRLEN_PP(passwd));