From 8f7319a49fcf654bac56f022e7898b2b20a54626 Mon Sep 17 00:00:00 2001 From: Ilia Alshanetsky Date: Thu, 6 Apr 2006 02:39:55 +0000 Subject: [PATCH] Fixed safe_mode check for source argument of the copy() function. --- NEWS | 1 + ext/standard/file.c | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index 48d111fe43..bb7dadcd7f 100644 --- a/NEWS +++ b/NEWS @@ -1,6 +1,7 @@ PHP NEWS ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||| 30 Mar 2006, PHP 5.1.3RC2 +- Fixed safe_mode check for source argument of the copy() function. (Ilia) - Fixed mysqli bigint conversion under Windows (Georg) - Fixed XSS inside phpinfo() with long inputs. (Ilia) - Check 2nd parameter of tempnam() against path components. (Ilia) diff --git a/ext/standard/file.c b/ext/standard/file.c index 12816c75c5..bc5ee3d2c1 100644 --- a/ext/standard/file.c +++ b/ext/standard/file.c @@ -1767,7 +1767,7 @@ no_stat: } safe_to_copy: - srcstream = php_stream_open_wrapper(src, "rb", STREAM_DISABLE_OPEN_BASEDIR | REPORT_ERRORS, NULL); + srcstream = php_stream_open_wrapper(src, "rb", ENFORCE_SAFE_MODE | REPORT_ERRORS, NULL); if (!srcstream) { return ret; -- 2.50.1