694 Commits

Author	SHA1	Message	Date
Dmitry Stogov	1a08aadc9b	Fixed memory corruption because of double free()	2008-03-11 09:36:41 +00:00
Felipe Pena	84a8bb038a	MFH: New way for check void parameters	2008-03-10 22:15:36 +00:00
Felipe Pena	77af81b8c3	Fix test (thanks Scoates!)	2008-03-08 23:31:05 +00:00
Gwynne Raskind	8bbef4f940	Forgot one file in last commit	2008-03-07 23:20:54 +00:00
Gwynne Raskind	3e99d5cc5b	MFH: fix bug #32330 (session_destroy, "Failed to initialize storage module", custom session handler)	2008-03-07 23:20:32 +00:00
Sebastian Bergmann	d1dded8751	MFH: Bump copyright year, 2 of 2.	2007-12-31 07:17:19 +00:00
Yiduo (David) Wang	4b4d634cb9	MFH: Added macros for managing zval refcounts and is_ref statuses	2007-10-07 05:22:07 +00:00
Dmitry Stogov	6c810b0d4c	Improved memory usage by movig constants to read only memory. (Dmitry, Pierre)	2007-09-27 18:00:48 +00:00
Ilia Alshanetsky	ea6de20d86	Fixed Bug #42596 (session.save_path MODE option does not work).	2007-09-10 23:42:54 +00:00
Jani Taskinen	de85bf4060	MFH: ws + cs changes (sync to ease merging patches around!)	2007-08-23 12:23:59 +00:00
Jani Taskinen	19401951c0	MFH: sync	2007-08-23 11:42:21 +00:00
Ilia Alshanetsky	89c0ba1685	Fixed bug #37273 (Symlinks and mod_files session handler allow open_basedir ... bypass).	2007-08-23 02:04:39 +00:00
Stanislav Malyshev	6b7f164803	correct fix for access control for save_path and .htaccess	2007-08-03 01:16:40 +00:00
Ilia Alshanetsky	3034092111	Fixed bug #42135 (Second call of session_start() causes creation of SID)	2007-07-29 14:43:30 +00:00
Stanislav Malyshev	143badba52	always check save_path (issue reported by Maksymilian Arciemowicz)	2007-07-10 17:40:41 +00:00
Ilia Alshanetsky	e2d606e18b	Fixed compiler warning	2007-06-17 14:25:46 +00:00
Stefan Esser	df7bfe0a0f	MFH	2007-06-16 07:48:07 +00:00
Stanislav Malyshev	70a8f9313b	Disallow characters that Cookie RFC does not allow in unquoted cookies	2007-06-15 22:40:00 +00:00
Antony Dovgal	d042fd0675	MFH: php_gmtime_r() fixes	2007-06-07 08:59:00 +00:00
Ilia Alshanetsky	c38ad55e8e	Fixed bug #41600 (url rewriter tags doesn't work with namespaced tags).	2007-06-06 00:00:28 +00:00
Antony Dovgal	ffd09c0961	fix tests	2007-05-18 11:29:55 +00:00
Stanislav Malyshev	69650d0ebf	do not send cookie when session is passed in URL, same as it happens with GET/POST	2007-05-16 01:18:14 +00:00
Antony Dovgal	1f65545121	fix test names	2007-05-07 18:03:01 +00:00
Antony Dovgal	39f9184fa6	MFH: fix #40998 (long session array keys are truncated)	2007-04-04 19:52:19 +00:00
Ilia Alshanetsky	7aab16c333	Fixed MOPB-22-2007:PHP session_regenerate_id() Double Free Vulnerability ... # Discovered by Stefan Esser	2007-03-14 19:37:07 +00:00
Martin Kraemer	9c62ddde34	Typo	2007-03-14 09:58:14 +00:00
Ilia Alshanetsky	a500d1efe9	Adjust checks to allow paths without a trailing /	2007-03-03 15:07:31 +00:00
Ilia Alshanetsky	4735df26f8	Improve safe_mode check	2007-03-02 00:49:47 +00:00
Ilia Alshanetsky	efad70c2cc	snprintf() -> slprintf()	2007-02-27 03:28:17 +00:00
Antony Dovgal	c667c70bdb	fix typo	2007-02-26 17:47:21 +00:00
Marcus Boerger	50ea26760d	- Avoid sprintf, even when checked copy'n'paste or changes lead to errors	2007-02-24 02:17:47 +00:00
Stanislav Malyshev	3e262bd369	disallow negative length	2007-02-24 01:18:14 +00:00
Ilia Alshanetsky	c6402df3a7	Eliminate strcat() usage.	2007-02-19 23:53:00 +00:00
Ilia Alshanetsky	629d7cf43f	Fixed Bug #40274 (Sessions fail with numeric root keys).	2007-02-06 00:01:18 +00:00
Dmitry Stogov	ae792a06b0	Fixed SIGSEGV	2007-01-10 07:04:49 +00:00
Ilia Alshanetsky	81729c1ece	Prevent SESSION/GLOBALS overload via session decoding	2007-01-09 15:31:12 +00:00
Ilia Alshanetsky	d1891c3d8a	removed dl() block	2007-01-06 17:35:44 +00:00
Hannes Magnusson	630254d55e	Fix skipif	2007-01-06 16:56:38 +00:00
Ilia Alshanetsky	7ba84b8807	Added missing open_basedir checks	2007-01-04 23:49:35 +00:00
Sebastian Bergmann	4223aa4d5e	MFH: Bump year.	2007-01-01 09:36:18 +00:00
Ilia Alshanetsky	ba64553913	Added boundary checks to php_binary deserializer	2006-12-31 22:25:55 +00:00
Nuno Lopes	66e555c66f	die("skip this is for PHP < 4.2.3");	2006-12-27 15:22:28 +00:00
Ilia Alshanetsky	ffd41a503f	Session deserializer protection.	2006-12-26 16:53:47 +00:00
Antony Dovgal	7d2142a56e	protect _SESSION, HTTP_SESSION_VARS and GLOBALS ... maintain an internal reference of _SESSION, so that it won't be possible to destroy it from userspace	2006-12-20 19:31:28 +00:00
Antony Dovgal	bcf457d828	MFH: fix retval type	2006-12-04 15:58:48 +00:00
Ilia Alshanetsky	35f78f221b	Fixed bug #37627 (session save_path check checks the parent directory).	2006-12-04 15:19:26 +00:00
Ilia Alshanetsky	5f3e233ea7	Disallow \0 chars inside session.save_path	2006-12-01 00:27:20 +00:00
Hannes Magnusson	050f94f746	MFH: Fix double "wron param count" messages	2006-11-03 14:46:48 +00:00
Ilia Alshanetsky	3f71251ffa	MFH: Fixed bug #39265 (Fixed path handling inside mod_files.sh).	2006-11-03 13:19:07 +00:00
Ilia Alshanetsky	b1d8f7e09d	Expose session storage module locater and serialization function via PHPAPI	2006-10-06 21:11:36 +00:00