php-src/main/safe_mode.h

#ifndef SAFE_MODE_H
#define SAFE_MODE_H

/* mode's for php_checkuid() */
#define CHECKUID_DISALLOW_FILE_NOT_EXISTS 0
#define CHECKUID_ALLOW_FILE_NOT_EXISTS 1
#define CHECKUID_CHECK_FILE_AND_DIR 2
#define CHECKUID_ALLOW_ONLY_DIR 3
#define CHECKUID_CHECK_MODE_PARAM 4
#define CHECKUID_ALLOW_ONLY_FILE 5

extern PHPAPI int php_checkuid(const char *filename, char *fopen_mode, int mode);
extern PHPAPI char *php_get_current_user(void);

#endif
Change header protection macros to conform to standard. Draft 3 of IEEE 1003.1 200x, "2.2 The Compilation Environment" All identifiers that begin with an underscore and either an uppercase letter or another underscore are always reserved for any use by the implementation. 2000-07-03 07:46:51 +08:00			`#ifndef SAFE_MODE_H`
			`#define SAFE_MODE_H`
PHP 4.0 1999-04-08 05:05:13 +08:00
- Define the different possible modes for readibility and use in the rest - of PHP 2000-11-02 02:05:27 +08:00			`/* mode's for php_checkuid() */`
			`#define CHECKUID_DISALLOW_FILE_NOT_EXISTS 0`
			`#define CHECKUID_ALLOW_FILE_NOT_EXISTS 1`
			`#define CHECKUID_CHECK_FILE_AND_DIR 2`
			`#define CHECKUID_ALLOW_ONLY_DIR 3`
- When mode is specified the flag is a don't care 2000-11-03 07:30:48 +08:00			`#define CHECKUID_CHECK_MODE_PARAM 4`
o Fixed Bug #12121: chdir and safe_mode - [ main/safe_mode.h ] added new checkuid mode: CHECKUID_ALLOW_ONLY_FILE: skips directory check if file check fails - [ ext/standard/dir.c ] changed php_checkuid() to use CHECKUID_ALLOW_ONLY_FILE instead of CHECKUID_ALLOW_ONLY_DIR - [ main/safe_mode.c ] added code for new checkuid mode o Fixed Bug #12119: safe mode owner check can be bypassed with symlink - [ main/safe_mode.c ] use VCWD_REALPATH to resolve destination of symlink before trimming filename o New Feature: safe_mode_include_dir (php.ini directive) - Allows bypassing UID/GID checks when including files from the directory in safe_mode_include_dir and its subdirectories. (safe_mode must be on, directory must also be in include_path or full path must be used when including) o Fixed Feature: safe_mode_gid (php.ini directive) - Correctly check (and report) UID/GID bits on directories o Changed include() fall back to scripts cwd implementation - CWD added to the (local) search path in php_fopen_with_path() instead of seperate case. [ main/fopen_wrappers.c ] 2001-07-14 02:21:21 +08:00			`#define CHECKUID_ALLOW_ONLY_FILE 5`
- Define the different possible modes for readibility and use in the rest - of PHP 2000-11-02 02:05:27 +08:00
- I wrote a long msg but the commit didn't go through. - So here is the short version: - a) Start moving to binary opens in Windows - b) Give checkuid_mode() a small face lift including the fopen-wrappers.c - The mode to this function should at least be a #define but that is for - another day. Anyway this whole stuff should be given more face lifts in - the future. 2000-06-26 01:02:59 +08:00			`extern PHPAPI int php_checkuid(const char filename, char fopen_mode, int mode);`
More php3_ annihilation 1999-12-18 03:16:50 +08:00			`extern PHPAPI char *php_get_current_user(void);`
PHP 4.0 1999-04-08 05:05:13 +08:00
			`#endif`