Commit Graph

208 Commits

Author SHA1 Message Date
Dmitry Stogov
c1ef996a1c Removed shebang line check from CGI sapi (it is checked by scanner) 2008-08-04 07:20:44 +00:00
Dmitry Stogov
637e591a3d Fixed chdir() into requested file directory inconsistencies 2008-07-21 08:42:35 +00:00
Dmitry Stogov
977cc79398 Added ability to use stream wrappers in include_path 2008-03-27 10:33:52 +00:00
Dmitry Stogov
cee56e2022 Fixed ws and comment 2008-03-24 09:30:54 +00:00
Dmitry Stogov
ab77e14ad2 Disable path resolution for filenames with stream wrappers
More careful check for relative pathes (./xxx and ../xxx)
2008-03-13 14:10:08 +00:00
Dmitry Stogov
c8b1dbff23 Optimized require_once() and include_once() by eliminationg open() syscall on se
cond usage.
2008-03-05 13:35:02 +00:00
Dmitry Stogov
6c51ef721f Fixed bug #43491 (Under certain conditions, file_exists() never returns) 2008-01-29 14:25:07 +00:00
Sebastian Bergmann
9b620d50b4 Bump copyright year, 2 of 2. 2007-12-31 07:12:20 +00:00
Hannes Magnusson
003bb5ceaa MFB5.3: Fixed bug#43105 (PHP seems to fail to close open files.) 2007-12-27 02:11:05 +00:00
Scott MacVicar
7ba8a98fd3 Fix expand_filepath when including relative files, ideally you should test you code... 2007-10-09 10:04:19 +00:00
Jani Taskinen
c1c60fb7e2 ws + cs 2007-10-09 08:40:25 +00:00
Robert Thompson
d5192b04a4 Fix for bug 41822. expand_filepath() will now return a relative path under the specific situation where getcwd() returns NULL and the file is still readable. As far as I have been able to tell, this fix only applies to the Solaris OS where files in directories with (--x) cannot getcwd(). 2007-10-09 02:41:14 +00:00
Antony Dovgal
eb5e7540b4 use constant 2007-07-19 10:03:17 +00:00
Dmitry Stogov
1f8c608320 Fixed symlink("", "somthing") and link("", "somthing") in ZTS mode 2007-07-10 13:21:31 +00:00
Antony Dovgal
cd7750e4ba fix #41518 (file_exists() warns of open_basedir restriction on non-existent file) 2007-06-01 13:33:48 +00:00
Dmitry Stogov
44ac45fd92 Fixed endless loop in open_basedir check 2007-04-18 11:59:03 +00:00
Antony Dovgal
a8e133eafa MFB: fix #40931 (open_basedir bypass via symlink and move_uploaded_file()) 2007-04-10 22:31:27 +00:00
Marcus Boerger
20a40063c5 - avoid sprintf 2007-02-24 16:25:58 +00:00
Hannes Magnusson
61b4b4b628 MFB: Fix build (wharmby at uk dot ibm dot com) 2007-01-12 14:34:46 +00:00
Antony Dovgal
9efc4483c0 plug newly added leak 2007-01-12 09:10:05 +00:00
Ilia Alshanetsky
e5a2796223 MFB:
Fixed bug #40098 (php_fopen_primary_script() not thread safe).
	Adjusted previous fixes for similar issue to handle sysconf() failures
2007-01-12 01:50:43 +00:00
Sebastian Bergmann
3717df72ae Bump year. 2007-01-01 09:29:37 +00:00
Dmitry Stogov
b71309f4a2 Removed unnecessary checks for ISREG file and corresponding stat() calls on Wind
ows
2006-11-10 10:55:43 +00:00
Dmitry Stogov
dc34d34230 Simplify the code base as this getpwd() was used only once 2006-11-10 09:56:37 +00:00
Sara Golemon
be5debc65a Extend open_basedir functionality to allow runtime tightening 2006-10-17 21:54:17 +00:00
Nuno Lopes
c2b1be3549 MFB5.2: const keywording 2006-07-01 11:50:52 +00:00
Dmitry Stogov
c09bbfa2b8 Eliminated unnecessary getcwd() syscall 2006-03-17 10:46:02 +00:00
Ilia Alshanetsky
27e175eef0 So long safe_mode mode.
Also removed the magic_quotes configure option, no longer relevant since
the magic is gone :-).
2006-03-08 14:41:45 +00:00
Dmitry Stogov
c366cc6d1a Nuke int32_t (everywhere except streams layer) and signed/unsigned warnings 2006-03-02 13:12:45 +00:00
Andi Gutmans
d3f7bee047 Nuke php_check_safe_mode_include_dir 2006-02-19 01:19:37 +00:00
Andi Gutmans
e3b1e8c5dd - Some more safe_mode nuking 2006-02-19 01:10:13 +00:00
foobar
251c5173fd bump year and license version 2006-01-01 13:10:10 +00:00
Ilia Alshanetsky
6d2e7a84ca Fixed bug #32937 (open_basedir looses trailing / in the limiter).
Patch by Adam Conrad
2005-09-27 15:07:38 +00:00
foobar
23e671a51e - Bumber up year 2005-08-03 14:08:58 +00:00
Anantha Kesari H Y
d77acff66f main/fopen_wrappers.c
NetWare file names are case insensitive
main/main.c
NetWare has no sendmail binary. It uses the smart host mailing code avaiolable in php distro. Could not find a better place to put this than main/main.c.
-- Kamesh
2005-07-16 12:21:34 +00:00
Anantha Kesari H Y
f04b1e97bb NetWare LibC has pwd.h 2005-02-23 08:56:47 +00:00
Ilia Alshanetsky
e55938b6a8 Fixed bug #31514 (open_basedir uses path_translated rather then cwd for .
translation).
2005-02-02 23:43:17 +00:00
Anantha Kesari H Y
9b0489ac47 removed redundant checks for NETWARE 2004-09-23 15:43:54 +00:00
Ilia Alshanetsky
542b034efa Fixed bug #27559 (Corrected open_basedir resolving logic). 2004-03-16 00:31:22 +00:00
Ilia Alshanetsky
e8beeecf3e Fixed bug #26653 (open_basedir incorrectly resolved on win32). 2004-02-10 16:08:54 +00:00
Andi Gutmans
dbeb4158d2 - A belated happy holidays and PHP 5 2004-01-08 08:18:22 +00:00
Hartmut Holzgraefe
075e66cc08 signed/unsigned compiler warning fixes 2003-09-26 08:09:56 +00:00
Ilia Alshanetsky
9ba651c692 Fixed bug #24873 (incorrect handling of / inside open_basedir) 2003-07-30 17:55:06 +00:00
Ilia Alshanetsky
1e92b5e7a3 Make php_check_safe_mode_include_dir check independent of unrelated
open_basedir directive and make it properly handle undefined/empty
safe_mode_include_dir directive when safe_mode is enabled.
2003-07-22 01:32:01 +00:00
Ilia Alshanetsky
419448238b Fixed typo. 2003-06-24 14:36:01 +00:00
Ilia Alshanetsky
6b5b6079da Fix for bug #24313 (port from dead PHP_5 branch) 2003-06-24 13:56:25 +00:00
James Cox
f68c7ff249 updating license information in the headers. 2003-06-10 20:04:29 +00:00
Sterling Hughes
84f0dd0e44 really fix 2003-03-26 23:03:48 +00:00
Sterling Hughes
c0f04cc087 fix segfault 2003-03-26 23:01:39 +00:00
foobar
8c3cd0344d MFB: Fix for open_basedir error message 2003-02-23 22:30:02 +00:00